A
AcadiFi
GO
GovernancePrep2026-05-20
ciaCoreGovernanceIndependenceand Objectivity

How should a CAE handle scope pressure from management?

- If management asks the CAE to drop a risky area from the audit plan, should the CAE compromise to preserve the relationship or escalate immediately?

52 upvotes
Verified ExpertVerified Expert
AcadiFi Certified Professional
  • The CAE should first understand the reason for the request, then evaluate whether it creates an inappropriate scope limitation. Not every timing request is improper. For example, delaying a low-risk review for a system conversion may be reasonable if the audit committee understands the change.
  • If management's request would hide a significant risk, narrow the audit conclusion, or prevent internal audit from fulfilling the approved plan, the CAE should document the issue and use the charter's governance channel. That usually means communicating the unresolved limitation to the board or audit committee.
  • The CAE should not quietly issue a broad conclusion after removing the most relevant work. If the scope changes, the report should make the actual coverage clear. If the limitation is unresolved and significant, governance oversight needs to know.
🔍

Master Core with our CIA Course

45 lessons · 90+ hours· Expert instruction

#["chief-audit-executive#scope-limitation#audit-committee#escalation"]