According to IIA guidance, if the internal audit activity does not have sufficient time to complete its usual root cause analysis, the chief audit executive (CAE) may recommend that management conduct further work to identify the root cause and address the issue. This approach ensures that the root cause is still identified and addressed without delaying the audit report, maintaining the integrity and usefulness of the audit findings while leveraging management's resources.
References:
* IIA Standards: 2410.A1 - Criteria for Communicating
* IIA Practice Guide: Root Cause Analysis