What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?

What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?
A . Contact the audit committee chair to discuss the finding
B . Obtain verbal assurance from management that the inappropriate access will be removed
C . Issue an interim audit report so that management can implement action plans
D . Ask the auditor to create a ticket with the IT help desk requesting to revoke the inappropriate access

View Answer

Answer: C