1. Organisations that take internal audit seriously will ensure the CAE is appropriately classified and therefore in a position with appropriate status and standing to access and authority to challenge 2nd level executive management.
2. This will ensure the CAE and internal audit function does not report through a layered hierarchical organisation management structure that can lead to the very real risk of internal audit loss of independence.