Reputation risk associated with lack of social responsibility programs, instances of possible ethics violations, and other ‘red-flag’ occurrences should be considered during annual audit planning. This work program is intended to position the internal audit function to help identify social responsibility issues that the organization may not be adequately addressing and to assess controls around those programs.