A chief audit executive (CAE) determined that management chose to accept a high-level risk that may be unacceptable lo the organization. Which is the best course of action for the CAE to Follow?

Question

Options

• AInclude using in a subsequent audit to determine if the risks are still present
• BDiscuss the matter with senior management and it not reserved with the board
• CRequire that management implement controls to mitigate lie risks
• DReport the risks to the process owners so that they can modify their process

• A
  12% (5)
• B
  76% (31)
• C
  7% (3)
• D
  5% (2)

Explanation

If the chief audit executive (CAE) determines that management has chosen to accept a high-level risk that may be unacceptable to the organization, the CAE should first discuss the matter with senior management. If senior management does not address the concern, the CAE should escalate the issue to the board. This escalation process ensures that the highest levels of governance are aware of significant risks and can take appropriate action if necessary. It also aligns with the CAE's responsibility to ensure that risks are properly managed within the

No community discussion yet for this question.