Which of the following qualifies as an acceptable consulting service provided by the internal audit activity?
A.
Develop training and system rollout plans in response to the results of the change readiness assessment of a new sales distribution model
B.
Lead a risk self assessment session for laboratory managers to help identify inherent risks and provide recommendations on how to evaluate the risks
C.
Audit a third party cloud service provider to review the effectiveness of governance and management controls in providing secure services to its customers
D.
Conduct a post-implementation assessment of the enterprise resource planning system to determine whether project objectives were met and to identify opportunities to maximize potential benefits
Developing training and system rollout plans in response to the results of the change readiness assessment of a new sales distribution model qualifies as an acceptable consulting service provided by the internal audit activity. This service is advisory in nature and is designed to add value and improve an organization's operations—aligned with the definition of consulting services under IIA standards. References: IIA definition of consulting services, which includes activities that provide advice and assistance designed to add value and improve an organization’s governance, risk management, and control processes without the internal auditor assuming management responsibility.
Top of Form
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit