Question: An internal audit at a software development firm reveals that there are no formal risk assessment processes in place for new projects. How should the

An internal audit at a software development firm reveals that there are no formal risk assessment processes in place for new projects. How should the internal auditor address this finding?
A). Propose that the company outsource its risk management.
B). Recommend the immediate cessation of all new projects.
C). Suggest the adoption of a formal risk assessment framework for project management.
D). Advice the company to focus only on low-risk projects.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Accounting Questions!