Management action plans should include, at a minimum, an owner of the action plan. The owner is responsible for ensuring that the action plan is implemented and for overseeing the corrective measures. This accountability is crucial for effective follow-up and resolution of audit findings.
Reference:
IIA Standards: 2500 - Monitoring Progress
IIA Practice Guide: Follow-up Process in the Internal Audit Activity

A significant governance issue that must be reported to the board is the absence of a formal risk management and control process, with risk management being solely the responsibility of operational managers. Effective governance requires a structured risk management framework overseen at the highest levels of the organization. The lack of such a process indicates a critical deficiency that can have severe implications for the organization's ability to manage and mitigate risks.
Reference:
The Institute of Internal Auditors (IIA) Standard 2110 - Governance: "The internal audit activity must assess and make appropriate recommendations to improve the organization's governance processes."

Physically inspecting a sample of completed processing cycles for defective products provides direct evidence of the effectiveness of the quality control process. This method allows the internal auditor to observe firsthand whether defective products are being identified and removed prior to shipment, ensuring that the process operates as intended. This approach is more reliable than survey results or management reports, which may be subject to bias or inaccuracies.
Reference:
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard 2320 - Analysis and Evaluation

Stratified sampling is a technique that involves dividing a population into subgroups (strata) that share similar characteristics and then taking a sample from each subgroup. In the context of testing purchase transactions by different procurement officers, the transactions can be stratified based on the officers, ensuring that the audit team selects a sample that represents each officer's transactions. This method helps in achieving a more accurate and reliable assessment of the procurement process across all officers.
Reference:
The Institute of Internal Auditors (IIA), Practice Guide on Sampling
"Auditing and Assurance Services: An Integrated Approach" by Alvin
A . Arens, Randal J. Elder, Mark S. Beasley

According to the IIA's guidance, internal audit can accept consulting engagements, including providing training, as long as it does not impair their independence and objectivity. In this scenario, the most appropriate action for the chief audit executive (CAE) is to accept the engagement and hire an external specialist to deliver the training. This ensures that the internal audit activity does not compromise its independence by training on areas where they might later need to provide objective assurance. By using an external expert, the CAE ensures the training is conducted by someone with the requisite expertise and without any conflict of interest.
Reference:
The Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 1130: Impairment to Independence or Objectivity.
IIA Practice Guide, "Independence and Objectivity."