An organization’s ethics program is increasingly important in the current regulatory environment and critical to minimizing reputation risk. Internal audit is responsible for evaluating the effectiveness of ethics programs that can significantly reduce reputation risk exposure. However, evaluating a relatively intangible area such as ethical behavior can be challenging; this work program can assist in developing a comprehensive review.