When an internal audit team discovers that products were sold to a prohibited country due to sanctions, the best course of action is to consult with the legal department. This step ensures that the internal audit team receives expert advice on the legal implications and the appropriate course of action. Reporting to government regulators or external auditors without legal consultation may result in incorrect or premature actions. The legal department can guide the auditors on compliance with relevant laws and regulations, ensuring that the organization handles the violation appropriately.
References:
* The IIA Standards: Standard 2060 - Reporting to Senior Management and the Board: "The chief audit executive must report periodically to senior management and the board on the internal audit activity's purpose, authority, responsibility, and performance relative to its plan."
* The IIA Practice Guide: "Coordinating Risk Management and Assurance": Emphasizes the importance of consulting with legal experts on matters involving regulatory compliance.