The chief audit executive (CAE) taking on a consultative role can appropriately coordinate and facilitate risk workshops for management. This task aligns with the advisory function of internal audit, where they support and facilitate the risk management process without directly setting the risk appetite or determining risk mitigation strategies, thereby maintaining their advisory and facilitative role without assuming management responsibilities.

International Standards for the Professional Practice of Internal Auditing; guidance on internal audit's role in consulting.