An organization is preparing a compliance report that will be submitted to both internal stakeholders and an independent regulatory body. Which of the following would be the BEST approach to ensure that the report satisfies the requirements of both parties?
Focus solely on external compliance mandates without detailing the internal governance mechanisms.
Limit the report to internal risk assessment findings without addressing regulatory compliance standards.
Summarize only the internal auditing procedures followed during the reporting period.
Include evidence of alignment with regulatory compliance standards and internal policies and procedures.