According to IIA guidance, which of the following statements is true regarding the chief audit...

Follow-up activities must be performed on an ongoing basis, such as quarterly, rather than being scheduled as specific assignments in the internal audit plan

The primary purpose of the CAE’s follow-up activities is to verify whether the audit issues raised in the audit report are valid

The CAE may plan follow-up activities on a selective basis, depending on risk significance, to verify whether management action plans were completed

Where management believes certain action plans are no longer necessary, the CAE must resolve the matter with the board and if the matter remains unresolved, communicate to senior management