IIA-CIA-PART2 · Question #202
A healthcare organization's chief audit executive (CAE) noted that the organization's IT team relies heavily on a vendor. Therefore an IT vendor assessment review was added to the annual audit plan…
The correct answer is C. Escalate the issue to the audit committee, as the CIO is unwilling to implement the recommended. When there is a disagreement between the audit team and management, and if the disagreement concerns a significant risk, the issue should be escalated to the audit committee. The audit committee has the authority to review and resolve such disputes. Escalating the issue ensures…
Question
A healthcare organization's chief audit executive (CAE) noted that the organization's IT team relies heavily on a vendor. Therefore an IT vendor assessment review was added to the annual audit plan. During the review, the audit team discovered that the vendor had not been performing proper monitoring to ensure that the subcontractors it hired comply with the organization requirements. The organization's chief information officer (ClO) does not agree with the audit team's recommendation for the IT team to monitor the compliance level of vendor subcontractors. How should the audit team proceed to resolve this situation?
Options
- AWrite a risk acceptance memo for the CIO to sign acknowledging the observation and indicating a
- BProvide an example of the attestation form that vendors must use. Then, recommend that the IT
- CEscalate the issue to the audit committee, as the CIO is unwilling to implement the recommended
- DEscalate the issue to the CAE to assess whether the ClO's reasoning is acceptable.
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- C83% (19)
- D4% (1)
Explanation
When there is a disagreement between the audit team and management, and if the disagreement concerns a significant risk, the issue should be escalated to the audit committee. The audit committee has the authority to review and resolve such disputes. Escalating the issue ensures that the concern is addressed at the highest governance level, maintaining the integrity and effectiveness of the internal audit function.
Topics
Community Discussion
No community discussion yet for this question.