The internal auditor should report to the top management - this is because the top management of the company is responsible for the management system, and they need to know about the nonconformities and other problems.

Examples:
- The internal auditor sends the Internal audit report to the top management.
- The internal auditor consults with the CEO on how to report a certain nonconformity in the IT department.