Câu 347: IIA-CIA-PART1: Certified Internal Auditor - Part 1 The Internal Audit Activitys Role in Governance Risk and Control

An internal auditor is evaluating the effectiveness of controls in the organization's order-to-cash process. The auditor agrees with the process owner that the appropriate response to address the risk of bad debt is to mitigate the risk. Which of the following is the appropriate next step for the auditor?

1. A. Document the agreed action plan to mitigate the risk and follow up after an established time period.
2. B. Test the existing controls to determine whether they effectively mitigate the risk. — đáp án hiện tại
3. C. Identify the impact and likelihood of the risk to determine its significance.
4. D. Identify the actual controls to be applied to mitigate the risk.