Which of the following statements represents the most appropriate correlation between an organization's risk maturity and the internal audit activity’s consulting role in risk management processes?
A.
When an organization has a high level of risk maturity the internal audit activity is less likely to provide consulting services related to risk management
B.
When an organization has a low level of risk maturity, the internal audit activity is less likely to provide consulting services related to risk management
C.
When an organization has a high level of risk maturity the internal audit activity is more likely to provide consulting services related to risk management
D.
There is typically no correlation between an organization’s risk maturity and the extent to which the internal audit activity’s consulting role in risk management processes
When an organization has a high level of risk maturity, the internal audit activity is less likely to provide consulting services related to risk management. In highly mature risk environments, organizations typically have well-established risk management processes and capabilities, thereby reducing the need for consulting services from internal audit in this area. Instead, internal audit may focus more on assurance services over the existing risk management processes to ensure they are functioning as intended.
Risk management and internal audit literature discussing the relationship between organizational risk maturity and the role of internal audit.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit