According to IIA guidance, which of the following is true regarding the exit conference for an internal audit engagement?
During follow-up. the internal auditor discovered that operational management did not implement effective actions to address a significant control breach If the issue is left unresolved it may result in regulatory sanctions and damage the organization's reputation What is the most appropriate next step for the chief audit executive to lake?
Which of the following is the best approach for the internal audit function to communicate moderate and high risk observations to management?
In which of the following situations would it be most appropriate for an internal audit function to issue an interim report or memo?