An internal auditor compares real-time gasoline production data to corresponding final gasoline production reports and finds minor but consistent daily discrepancies. If the auditor is concerned about theft, which of the following next steps is most consistent with IIA guidance?
Reviewing the processes used to collect the production data and to compile the final production reports is the next step most consistent with IIA guidance. This allows the auditor to identify any potential errors or weaknesses in the current processes that might be causing the discrepancies. It is essential to understand the root cause of the discrepancies before taking any further action, such as notifying security or confronting managers. This approach aligns with the systematic and evidence-based investigation principles of internal auditing.
Actually, it is "Review the processes used to collect the production data and review the processes used to to compile the final production reports".
How auditors can compile final reports? Auditors cannot compile anythng for the business. They can assess not compile things.