Who is responsible for deciding what action is taken on audit reports?
Normally, the senior manager to whom the report is directed decides the most appropriate action to take with respect to recommendations. Internal Audit will facilitate the process if requested. However, if Internal Audit believes the University remains overly exposed to risk as a result of the actions proposed/taken, and agreement cannot be reached on the issue, it is referred to the Board Audit Committee.
