Role of the CAE: The Chief Audit Executive (CAE) is responsible for developing a risk-based audit plan and ensuring it is aligned with the organization's goals and emerging risks. Significant changes to the audit plan must be communicated appropriately within the organization.
IIA Standards:
* Standard 2020 - Communication and Approval: The CAE must communicate the internal audit plan and resource requirements, including significant interim changes, to senior management and the board for review and approval.
* Risk Assessment: Any changes to the audit plan due to emerging risks, such as a corporate merger, must be documented and approved at the highest levels to ensure comprehensive risk coverage.
Most Appropriate Action:
* Communication with the CEO: The CAE should first discuss the revised audit plan with the CEO to ensure alignment with executive management's perspective on emerging risks.
* Board Approval: After discussing with the CEO, the CAE should present the revised audit plan to the board for formal approval, ensuring transparency and governance.
References:
* Presenting the revised audit plan to the board after discussing with the CEO ensures that all relevant stakeholders are informed and that the revised plan is formally approved, maintaining alignment with IIA standards.

Best practices for assurance engagement communication activities include defining the methods and timing of engagement communications during the "communicate" phase. This ensures that all stakeholders are aware of how and when they will receive information about the engagement, facilitating clear and effective communication. While it is important to communicate significant observations to relevant parties, including the audit committee if necessary, and to escalate issues as appropriate, the method and timing of these communications are crucial for maintaining clarity and coordination throughout the engagement. References:
* The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2420 - Quality of Communications.
* The IIA's Practice Guide on Communicating Assurance Engagement Results.

According to the CIA Exam syllabus, internal auditors must design and perform procedures that provide sufficient, reliable, relevant, and useful information (Standard 2310). Simply visually confirming equipment on-site does not confirm ownership; it only establishes physical existence. Ownership requires review of purchase invoices, titles, or registration documents.
The other procedures listed (vouching checks, reconciling invoices with shipping documents, and recalculating allowances) are appropriate and provide reliable audit evidence. Option A would therefore be questioned, as it does not sufficiently address the stated audit objective of ownership verification.

According to IIA guidance, if management refuses to accept audit recommendations and implement corrective actions, the chief audit executive (CAE) has a responsibility to ensure that the audit committee or the board is aware of the unresolved risks. The CAE should escalate the matter to senior management first. If senior management still does not take action, the CAE should then inform the board. This escalation process ensures that the board is fully informed about significant risks that management has decided to accept and can take appropriate action if necessary.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2600 - Communicating the Acceptance of Risks

If an organization pays one of its liabilities twice, its assets (cash) would be reduced more than necessary.
This results in an understatement of net income and owners' equity because the additional payment is an expense that should not have been recorded. Liabilities would be overstated because the duplicate payment does not reduce the liability correctly.
References:
"Financial Accounting Principles," which discusses the impact of errors on financial statements.