An internal auditor determines that certain information from the engagement results is not appropriate for disclosure to all report recipients because it is privileged. In this situation, which of the following actions would be most appropriate?
A.
Disclose the information in a separate report.
B.
Distribute the information in a confidential report to the board only
C.
Distribute the reports through the use of blind copies.
D.
Exclude the results from the report and verbally report the conditions to senior management and the board.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit