A manufacturing organization's chief audit executive (CAE) was approached by the head of security from one of the manufacturer's third party suppliers The head of security requested internal audit records from a recent audit engagement involving the third-party supplier The head of security believed those records contained information that would enable to identify employees of the thirdparty supplier who may be involved m fraudulent activities What is the most appropriate course of action for the CAE?

Question

Farshin Golpad · Accepted Answer

Consult with the manufacturer's senior management to determine whether releasing tie records would be appropriate

Farshin Golpad · Answer

Obtain approval from the manufacturer's audit committee regarding the release of audit records

Farshin Golpad · Answer

Release the records but first remove all data regarding the manufacturing organization s internal actions and procedures

Farshin Golpad · Answer

Deny access to the records as the third party supplier s security learn should be able to investigate then own employees.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 561 - IIA-CIA-Part1 discussion

Suggested answer: D

0 comments