Internal audit positioning