Internal audit provides the third line of defense by testing internal controls and reporting to
A) executive management.
B) board of directors.
C) external audit.
D) both executive management and the board of directors.

Question

Quizplus · Accepted Answer

Internal audit acts as the third line of defense in an organization's risk management and control processes. They test internal controls and report their findings to both executive management and the board of directors to ensure that both levels of leadership are informed about the effectiveness of internal controls and risk management processes.

Internal Audit Provides the Third Line of Defense by Testing