The IIA's guidelines suggest that internal audit may provide support by coaching management on risk responses, but it should not take on management’s responsibilities, such as implementing risk responses or setting the risk appetite, as this would impair objectivity.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit