If the CAE concludes that management has accepted a level of risk that may be unacceptable to the organization, what should the CAE do?
a) Resign as the internal audit function has lost its independence.
b) Discuss the matter with senior management and if not resolved communicate the matter to the audit committee.
c) Accept management's decision as it is their responsibility to determine the risk response.
d) Take the matter to the organizations external auditor.
Ans: b) Discuss the matter with senior management and if not resolved communicate the matter to the audit committee.
You might also like to view...
________ analyze the business situation and identify the need for information and information services to meet the problems or opportunities of the business
A) Programmers B) Users C) Systems analysts D) Database analysts
The performance targets set during the planning cycle are
A) goals. B) procedures. C) budgets. D) objectives.