In relation to audit findings, how should the action plan be structured?

• A. It should address minor findings only
• B. It should address every finding with equal priority
• C. It should address each area identified by the audit findings
• D. It should be created before the audit

Answer: (C)

Audits identify multiple areas needing improvement; the action plan should connect directly to those areas identified by the audit findings. By structuring the plan around each identified area, you ensure comprehensive coverage—no issue is overlooked—and you can tailor actions to the specific control weaknesses and risks in that area. For each area, you typically set clear corrective actions, assign owners, set timelines, and specify evidence to verify completion, along with methods to confirm the fixes are effective.

Trying to address only minor findings misses high‑risk issues; treating all findings as equal priority wastes resources by not reflecting differing impacts and urgency. Creating the plan before the audit would make it disconnected from actual results and undermine the purpose of the audit.