If the chief audit executive (CAE) observes that an international wire was approved to transfer...

When internal audit identifies a serious issue, the CAE must first discuss the matter with management to confirm facts and obtain explanations. If the issue remains unresolved or poses unacceptable risk, it is then escalated to senior management, the board, and regulators as required. Direct reporting to regulators (Option C) or the audit committee (Option D) without first engaging management bypasses proper escalation. Option A (ongoing monitoring) delays action on a compliance breach.