According to IIA guidance, which of the following statements is true regarding the authority of the chief audit executive (CAE) to release previous audit reports to outside parties?
According to IIA guidance, which of the following statements is true regarding the authority of the chief audit executive (CAE) to release previous audit reports to outside parties?
According to the guidance from the Institute of Internal Auditors (IIA), the Chief Audit Executive (CAE) has the authority to release prior internal audit reports to outside parties with the approval of the board and senior management. This ensures that the release of potentially sensitive information is managed within the governance framework of the organization, maintaining confidentiality and propriety.
Option A is wrong because the CAE doesn't need the approval of both the board and Snr. management to release prior audit report. However, depending on the sensitivity of the report, the CAE may consult with Snr. Mgt. and or legal counsel. Which is were judgement is required as deemed necessary and appropriate.
Implementation Standard 2440.A2 states the CAE must consult with senior management and/or legal counsel as appropriate. Therefore, the board and senior management do not approve the distribution.
This makes option B wrong and it actually looks wrong, can someone help elaborate why B
possibly because it says previous audits - so they are less sensitive in nature - possibly?
A is the correct answer
I thought so too
A is correct
A doğru cevap