7Internal audit organizations do not have a duty to report outside that entity unless required by law , rule , regulation , or policy .
Internal audit organizations include the IRS , the internal revenue service , and work by collecting data on finances .