Which of the following actions would be most appropriate for the chief audit executive to take?

As a result of server managements assumption of risk there is residual risk that exceeds me organisation’s risk appetite.

Which of the following actions would be most appropriate for the chief audit executive to take?
A . ignore the responsibility of addressing the residual risk
B . Assume the responsibility of addressing the residual risk
C . Ensure senior management acknowledges residual risk
D . Communicate with the board the issue of residual risk

View Answer

Answer: D