ACCA Strategic Professional · Strategic Business Leader · Managing, monitoring and mitigating risk
Brindle Foods' board wants an independent assessment of whether its internal control system is operating effectively. The internal audit function reports to the finance director, who is responsible for many of the controls being reviewed. Under good governance practice, what is the most appropriate improvement?
Internal audit should report functionally to the audit committee. This protects its independence and objectivity when reviewing controls run by the finance director, whereas self-assessment or the finance director chairing the committee would leave the conflict of interest in place.
- AHave internal audit report functionally to the audit committee to protect its independence and objectivityCorrect
- BReplace internal audit with additional line manager self-assessment
- CReduce the scope of internal audit to financial controls only
- DMake the finance director chair of the audit committee
Explanation
Internal audit must be independent of those whose controls it reviews. Reporting functionally to the audit committee, made up of non-executives, supports objectivity. Self-assessment is not independent, and the finance director chairing the committee would worsen the conflict.
Did you get it right without looking?
One question tells you little. A timed set on Managing, monitoring and mitigating risk shows your real accuracy, how long you take and where you lose marks.
More Managing, monitoring and mitigating risk questions
- Kestrel Logistics relies on one supplier for a specialised component. Following a flood at the supplier's site, deliveries stop for weeks. A…
- Dunmore Logistics' finance director states that the company's reported profits fall whenever the euro weakens, because it earns revenue in e…
- Zentra Foods, a listed manufacturer, wants its board to adopt a risk framework that links risk management to strategy-setting and performanc…
- Halden Logistics has a risk register that the board reviews annually. During the year a major supplier failed and a new cyber threat emerged…
- Hartwell Retail Ltd's risk manager notes that the ISO 31000 standard on risk management differs from a compliance checklist. Which feature o…
- Marlow Pharma plc is adopting the COSO Enterprise Risk Management framework (Integrating with Strategy and Performance). The chief executive…