After management responds to audit findings and provides an action plan, it is crucial for the internal audit activity to follow up to validate that the promised changes have been implemented and are effective. This follow-up ensures that the issues identified, such as those related to segregation of duties in accounts payable, have been appropriately addressed.
* IIA Standard 2500 - Monitoring Progress:
* This standard requires the internal audit activity to monitor the implementation of management's corrective actions. Following up on audit findings is essential to ensure that the actions taken effectively mitigate the identified risks.
* Validation of Corrective Actions:
* By conducting a follow-up review, the internal audit activity can verify that the changes have been made as planned and assess whether these changes are sufficient to resolve the issues. This process helps maintain the integrity and effectiveness of the internal audit function.
* IIA Practice Advisory 2500-1:
* The advisory emphasizes the importance of follow-up activities to confirm that management's responses to audit recommendations have been implemented as intended.
* Option B (Include in the next scheduled audit): While this is a backup plan, it may delay the validation of corrective actions, allowing potential risks to persist.
* Option C (No further action): This approach is inappropriate because it assumes the problem is resolved without verification, which could lead to unmitigated risks.
* Option D (Placing an auditor in the department): This could compromise the independence of the internal audit function and is not a standard practice.
Detailed Explanation:Why Not Other Options?Conclusion: Option A is correct because it ensures that the internal audit activity fulfills its responsibility to validate that management's corrective actions have been implemented and are effective, aligning with IIA standards on monitoring progress.