Management requested that the chief audit executive (CAE) include an audit of the organization's health and safety program in next year's annual audit plan. However, the internal audit activity has no expertise in this are
a. Which of the following would be the most appropriate actions for the CAE?
Comprehensive and Detailed Step-by-Step Explanation:
Reference to IIA Standards:
Standard 1210 - Proficiency: The internal audit activity must possess or obtain the knowledge, skills, and competencies needed to perform its responsibilities effectively.
If internal expertise is lacking, external resources or subject matter experts should be engaged.
Reasoning:
Option A is correct because collaborating with an internal expert ensures that the audit is performed competently while addressing the health and safety risks comprehensively.
Option B (amending the scope) avoids addressing critical risks, which may undermine the value of the audit.
Option C (relying on management's risk assessment) is inappropriate, as the internal audit function must independently evaluate the area.
Mitigating Lack of Expertise:
Leveraging subject matter experts ensures compliance with professional standards and the integrity of the audit process.
Currently there are no comments in this discussion, be the first to comment!