An internal auditor notes that employees continue to violate segregation-of-duty controls in several areas of the finance department, despite previous audit recommendations. Which of the following recommendations is the most appropriate to address this concern?
To effectively address the concern of continuous violation of segregation-of-duty controls in the finance department, it is crucial that management takes immediate action. Management is responsible for ensuring that proper controls are in place and followed. They have the authority to enforce compliance, implement corrective measures, and allocate resources to address the issue. Simply recommending additional reviews, training, or staff rotation does not directly address the immediate and ongoing violations. Therefore, recommending that management address these concerns immediately is the most appropriate course of action.
Since previous recommendation not working, management effort to address the issue is not effective, training is better choice
I agree it shoud be D
I think D is the correct answer because awareness training for staff doesn't resolve the segregation-of-duty violations.