[The following paragraph was effective before December 31, 2016. See PCAOB Release No. 2015-002. The current standard can be found here.]
Another factor the practitioner should consider when planning the engagement is whether the entity has an internal audit function and the extent to which internal auditors are involved in directly testing the MD&A presentation, in monitoring the entity's internal control applicable to the preparation of MD&A, or in testing the underlying records supporting disclosures in the MD&A. A practitioner should consider the guidance in AU section 322, The Auditor's Consideration of the Internal Audit Function in an Audit of Financial Statements, when addressing the competence and objectivity of internal auditors; the nature, timing, and extent of work to be performed; and other related matters.