Certain significant reported findings may require immediate management action. These conditions should be monitored by internal auditors until corrected. Follow-up activities should be included in the internal auditing department's work schedule. The value of internal auditing to an organization is based to a large extent on corrective action taken by management on reported audit findings. Follow-up increases the probability of corrective action.
Management is responsible for taking corrective action on reported audit findings.
These expectations result in the common objective of improving the organization. It is management's responsibility to make decisions on the appropriate action to be taken on reported audit findings. Follow-up is defined as a process by which internal auditors determine the adequacy, effectiveness, and timeliness of actions taken by management on reported audit findings. Such findings also include relevant findings made by external auditors and others. Responsibility for follow-up should be defined in the internal auditing department's written charter.