The Chief Audit Executive (CAE) of a Multinational Entity with Highly

The chief audit executive (CAE) of a multinational entity with highly automated and complex operations has just completed the update of the risk-based audit plan. Interviews with management revealed the introduction of new technology and a significant increase in both the number and severity of technology-based risk exposures. According to the International Professional Practices Framework, which of the following would be the best course of action for the CAE to undertake next?

A) Develop a detailed audit plan that makes the most efficient use and reallocation of existing internal audit resources.
B) Arrange for the outsourcing of some technology intensive audit processes and procedures based on the plan changes.
C) Evaluate whether appropriate skills and knowledge required to perform the necessary audit work currently exist in the department.
D) Begin planning to recruit information technology audit specialists and other expert personnel into the internal audit activity.