Valid IIA-CIA-Part2 Dumps shared by ExamDiscuss.com for Helping Passing IIA-CIA-Part2 Exam! ExamDiscuss.com now offer the newest IIA-CIA-Part2 exam dumps, the ExamDiscuss.com IIA-CIA-Part2 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com IIA-CIA-Part2 dumps with Test Engine here:
Which of the following actions should the chief audit executive take when senior management decides to accept risks by choosing to do business with a questionable vendor?
Correct Answer: D
If senior management decides to accept risks, such as doing business with a questionable vendor, and the chief audit executive (CAE) believes this poses a significant risk to the organization, the CAE should escalate the issue to the board. The board has the ultimate responsibility for overseeing risk management and can decide on the appropriate action to take in response to the risk. IIA References: * IIA Standard 2600: Communicating the Acceptance of Risks states that when the CAE believes that senior management has accepted a level of residual risk that may be unacceptable to the organization, the CAE must discuss the matter with senior management. If the decision regarding risk remains unchanged, the CAE must inform the board. * The Practice Guide on Risk Management highlights the importance of the CAE keeping the board informed of significant risks that management has chosen to accept, particularly when these risks could have a material impact on the organization.