If management accepts the issue identified by the internal audit team but takes no remedial action, the next step for the chief audit executive (CAE) is to escalate the issue to senior management. This ensures that senior management is aware of the unresolved significant issue and can take appropriate action to address it.
Escalation is a critical step in ensuring that risks are managed effectively and that necessary corrective actions are implemented.
References:
* The Institute of Internal Auditors (IIA) Standard 2600