An internal auditor is conducting a review of the procurement function and uncovers a potential conflict of interest between the chief operating officer and a significant supplier of IT software development services. Which of the following actions is most appropriate for the internal auditor to take?
The most appropriate action for the internal auditor is to inform the audit supervisor. This ensures that the issue is promptly elevated to the proper level of authority within the audit function. Informing the supervisor is an essential first step because the supervisor can provide guidance on the appropriate course of action, ensure that the matter is documented correctly, and coordinate any necessary follow-up or additional investigation. This approach aligns with the internal auditor's responsibility to maintain proper channels of communication and reporting within the organization.
Just a follow up - shouldn't the audito investigate the potential conflict further before reporting that to his supervisor? A is correct ok but what with B?
the auditor should have a sufficient evidence to investigate
I think the question is what action to be taken first.