An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between six and 18 months for completion. Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. Which of the following is the most appropriate course of action for the chief audit executive to take?
The most appropriate course of action for the chief audit executive is to assess the adequacy of the action plan and monitor key dates and deliverables. This ensures that the plan’s effectiveness is evaluated and that the progress toward correcting the identified weaknesses is tracked and monitored over the required timeframe. Monitoring the plan as it is implemented is crucial in verifying that the corrections are on track and that any necessary adjustments can be made in a timely manner.
You only schedule follow up once corrective action has been completed.
B is correct but the question is asking for the most appropriate course of action and in this case, the CAE must first assess the adequacy and effectiveness of the action plan before he/she considers following up
B seems right to me
Why is A the correct answer. B seems right
becasue the need for a follow-up is included in option A. The management is going to create a plan and the auditors will assess its adequacy and "monitor" various dates.