Which of the following actions is the most appropriate response for an internal auditor to take when a significant risk is identified during a consulting engagement?

Question

Options

• AReport the risk identified from the consulting engagement to senior management.
• BDo not include the risk in the assessment of risk management processes, as that is management's
• CDo not report the risk, as it is out of scope for the consulting engagement.
• DInclude the risk identified from the consulting engagement in the next annual risk assessment only

• A
  81% (29)
• B
  11% (4)
• C
  6% (2)
• D
  3% (1)

Explanation

When a significant risk is identified during a consulting engagement, the most appropriate response is to report the risk to senior management. Even if the engagement is consulting in nature, it is still crucial for the internal audit activity to ensure that significant risks are communicated to those responsible for managing them.

No community discussion yet for this question.