According to IIA guidance, which of the following is an appropriate role for the internal audit activity?
The IIA's guidelines suggest that internal audit may provide support by coaching management on risk responses, but it should not take on management's responsibilities, such as implementing risk responses or setting the risk appetite, as this would impair objectivity.
Currently there are no comments in this discussion, be the first to comment!