Which of the following would be a legitimate action for the internal auditor to take when monitoring audit engagement results?
1. Disregard a certain risk because management and the board accepted the risk in the past.
2. Abdicate the responsibility for a particular risk because it is not part of the audit plan.
3. Obtain agreement from senior management that unresolved audit issues will be reported to the board. Request corrective action from management in writing.
The legitimate actions for an internal auditor when monitoring audit engagement results include obtaining agreement from senior management that unresolved audit issues will be reported to the board and requesting corrective action from management in writing. These actions ensure accountability and follow-up on audit findings. Disregarding a certain risk because management and the board accepted the risk in the past is not legitimate because risks need continuous monitoring and assessment. Abdicating responsibility for a risk not part of the audit plan is also not legitimate because the auditor has a responsibility to alert relevant parties about any identified risks.
option 4 is the last sentence in option 4. Besides option 1 and 2 are incorrect!
The question is incomplete. It is missing option 4
You can still answer as Option 1 & 2 are incorrect
Why 1 is not true?
It seems that Option 4 is the last sentence of Option 3