ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 69 - IIA-CIA-Part2 discussion

Report
Export

An organization's board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process. According to IIA guidance, which of the following roles should the CAE not undertake?

A.
Manage and coordinate risk management processes.
Answers
A.
Manage and coordinate risk management processes.
B.
Audit risk management processes.
Answers
B.
Audit risk management processes.
C.
Become involved in risk oversight committees, monitoring activities, and status reporting.
Answers
C.
Become involved in risk oversight committees, monitoring activities, and status reporting.
D.
Accept management's responsibility for risk management without board approval.
Answers
D.
Accept management's responsibility for risk management without board approval.
Suggested answer: D

Explanation:

According to IIA guidance, the chief audit executive (CAE) should maintain independence and objectivity in their role. While the CAE can manage and coordinate risk management processes, audit those processes, and be involved in risk oversight committees, they should not accept management's responsibility for risk management without the board's approval. This ensures that there is no conflict of interest and maintains the CAE's independence.

Reference:

IIA Standards - 1110: Organizational Independence

IIA Practice Advisory - 2060-1: Reporting to Senior Management and the Board

asked 18/09/2024
July Truong
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first