An internal audit activity is using the auditing-by-element approach to audit the organization's controls around corporate social responsibility.

Which of the following would be an element for the internal audit activity to consider?