Certified Internal Auditor (CIA) Part 2: Practice of Internal Auditing — Question 156

After finalizing an assurance engagement concerning safety operations in the oil mining process, the audit team concluded that no key controls were compromised. However, some opportunities for improvement were noted. Which of the following would be the most appropriate way for the chief audit executive
(CAE) to report these results?

Answer options

• A. The CAE should send the final report to operational and senior management and the audit committee.
• B. The CAE should send the final report to operational management only, as there is no need to communicate this information to higher levels.
• C. The CAE should notify operational and senior management that the audit engagement was completed with no significant findings to report.
• D. The CAE should send the final report to operational management and notify senior management and the audit committee that no significant findings were

Correct answer: D

Explanation

The correct answer, D, is appropriate as it ensures that operational management receives the detailed report while also keeping senior management and the audit committee informed about the lack of significant findings. Option A is less efficient as it includes unnecessary redundancy in communication. Option B fails to inform higher management who may need to be aware of opportunities for improvement, and option C does not provide the full context of the audit's findings.