A multinational organization has asked the internal audit activity to assist in setting up the organization's risk management system The chief audit executive (CAE) agrees to take on the engagement as a consultant. Which of the following tasks is appropriate for the CAE to undertake?
Role of CAE as Consultant: The chief audit executive (CAE) can act as a consultant to help management establish a risk management system. Their role should be facilitative rather than directive, ensuring that management owns the risk management process.
Appropriate Tasks:
Risk Workshops: Coordinating and facilitating risk workshops (option A) helps management identify and assess risks, allowing them to develop appropriate responses. This is a suitable task for the CAE.
Risk Appetite and Indicators: Establishing risk appetite (option B) and setting risk indicators and mitigation plans (option C) are management's responsibilities.
Reporting Risks: Determining the number of significant risks to report (option D) should also be a management function.
Currently there are no comments in this discussion, be the first to comment!