An internal auditor e assessing the design of a control and has identified a potential significant weakness. The auditor shared his concern with management however management does not agree that the…

Question

Options

• APerform additional audit work to better articulate the risk
• BReport the finding that management has accepted a level of risk that is unacceptable.
• CProceed to testing how effectively the control is opening.
• DBecause the design weakness has been identified no additional audit work is needed

• A
  83% (19)
• B
  4% (1)
• C
  4% (1)
• D
  9% (2)

Explanation

When an internal auditor identifies a potential significant weakness in a control and management does not agree with the assessment, the appropriate next step is to perform additional audit work to better articulate the risk. This means gathering more evidence, conducting further analysis, and providing clearer examples of how the weakness could impact the organization. By doing this, the auditor can better communicate the potential consequences and severity of the risk to management, increasing the likelihood of reaching a mutual understanding and agreement on the necessary actions.

No community discussion yet for this question.