The CAE must ensure the internal audit activity has the knowledge, skills, and competencies needed to address significant risks facing the organization. In this scenario, IT risks have not been audited due to a skills gap. The best response is to identify and provide training resources to strengthen the team’s IT audit capabilities.

Option A (data analytics) is a tool, not a competency solution. Option B (listening sessions) helps planning but does not address the skill deficiency. Option C (succession planning) is future-focused but does not solve the current IT knowledge gap.