A CMS under the policy is defined as an "entity's documented systematic efforts, appropriate to the size and nature of its business, to prevent, detect and correct violations" through the following CMS criteria:
A written understanding between the auditor and the client concerning the auditor's responsibility for the discovery of illegal acts is usually set forth in a(n):