Q: 18
Which of the following statements represents the most appropriate correlation between an organization's risk maturity and the internal audit activity’s consulting role in risk management processes?
Options
Discussion
I’d say A here. Higher risk maturity means management is already strong with risk processes, so audit’s consulting role drops off. Pretty sure that’s what IIA guidance points to, but open if someone disagrees.
Option C makes sense to me here. If the org has high risk maturity, wouldn't audit want to keep partnering on risk management and maybe even step up with more consulting since processes are solid? So I picked C, but I see what people say about less need for consulting in mature orgs. Could be missing something on the wording.
A makes sense because mature organizations usually need less consulting from internal audit. Would the answer change if the question said "most involved consulting role" instead of "most appropriate correlation"? That would flip my pick.
Similar question popped up in practice tests, so official guide and sample exams help here.
Be respectful. No spam.