1. Stage 1 reviews are performed for every internal audit service and involves review and sign-off by the engagement supervisor.
2. Stage 2 reviews are optional (not required by the GIAS) and should be applied using a risk-based approach. Some of these approaches are outlined for consideration.