Which of the following is most appropriate for internal auditors to do during the internal audit recommendations monitoring process?
Verification of Controls: The auditor should verify that the new IT system addresses the previously identified risks. This involves reviewing the system documentation and ensuring that the controls in the new system effectively mitigate the risks.
Reporting: Once the auditor has confirmed that the new system controls address the risks, they can report to senior management and close the outstanding issue, ensuring that all audit recommendations are appropriately resolved.
Other Options:
Accepting Management's Explanation: Without verification (option B) is not appropriate as it may leave risks unmitigated.
Escalating Without Verification: Advising management and escalating (option C) is premature if the new system may already address the issues.
Detailed Process Evaluation: Requiring additional details about the process (option D) may be unnecessary if the auditor can verify the controls directly.
Lindsey
1 months agoRanee
2 days agoAdolph
3 days agoMelvin
7 days agoDevorah
18 days agoCandida
1 months agoLorean
1 months agoMaynard
2 months agoKristian
10 days agoPaulina
11 days agoMickie
14 days agoDahlia
20 days agoIsadora
1 months agoWillodean
1 months agoNovella
1 months agoElvera
2 months agoMagda
2 months agoJesusita
2 months agoShawnee
2 months agoEve
2 months ago