What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?

What is the best course of action for a chief audit executive if an internal auditor identifies in the early stage of an audit that some employees have inappropriate access to a key system?
A . Contact the audit committee chair to discuss the finding
B. Obtain verbal assurance from management that the inappropriate access will be removed
C. Issue an interim audit report so that management can implement action plans
D. Ask the auditor to create a ticket with the IT help desk requesting to revoke the inappropriate access

View Answer

Answer: A