(1) Seeking information the audit committee requires from employees or external parties;
(2) Meeting with agency management, board, council, commission, or equivalent body members, external and internal auditors, legal counsel, or others as necessary; and
(3) Requiring internal auditors to report directly to the audit committee.