A new report from the Institute of Internal Auditors finds many internal audit departments may not be doing enough to provide assurance over environmental, health, and safety risks, and don't coordinate efforts well with separate EHS audit functions when they exist.