Which of the following statements is true?
A. If management chooses not to take action on internal audit’s assurance engagement observation, the chief audit executive (CAE) has a responsibility to propose an action plan to the board.
B. Internal audit’s responsibility for an assurance engagement observation ends when management implements changes to remediate the observation.
C. When management decides to accept the risk of not taking action on an assurance observation, the (CAE) is responsible for judging whether or not that decision is prudent.
D. An assurance engagement observation is considered remediated when management’s corrective action plan is approved by the board.