IIA Exam IIA-CHAL-QISA Topic 2 Question 26 Discussion

Actual exam question for IIA's IIA-CHAL-QISA exam

Question #: 26
Topic #: 2

A multinational organization has asked the internal audit activity to assist in setting up the organization's risk management system The chief audit executive (CAE) agrees to take on the engagement as a consultant. Which of the following tasks is appropriate for the CAE to undertake?

ACoordinate and facilitate risk workshops for management to attend

BEstablish the degree of risk appetite for management to accept.

CSet risk Indicators and mitigation plans for management to Implement.

DDetermine the number of significant risks for management to report to the board

Show Suggested Answer

Suggested Answer: A

Role of CAE as Consultant: The chief audit executive (CAE) can act as a consultant to help management establish a risk management system. Their role should be facilitative rather than directive, ensuring that management owns the risk management process.

Appropriate Tasks:

Risk Workshops: Coordinating and facilitating risk workshops (option A) helps management identify and assess risks, allowing them to develop appropriate responses. This is a suitable task for the CAE.

Risk Appetite and Indicators: Establishing risk appetite (option B) and setting risk indicators and mitigation plans (option C) are management's responsibilities.

Reporting Risks: Determining the number of significant risks to report (option D) should also be a management function.

by Dulce at May 05, 2025, 03:25 AM

Limited Time Offer

25%

1 months ago

I think the CAE should coordinate and facilitate risk workshops for management to attend.

upvoted 0 times

...