Who owns the records related to the internal audit program unless otherwise specified?

The records related to the internal audit program are owned by the Internal Audit Department because this department is responsible for planning, executing, and managing the internal audit activities within an organization. It also maintains and retains documentation related to these activities, including audit reports, findings, and action plans. This ownership ensures that the audit process is consistent, accountable, and follows established protocols, as the Internal Audit Department must ensure compliance with internal standards and relevant regulatory requirements.

While the auditee may have input on the audit process and may retain records related to findings or remediation efforts, the overarching responsibility for the audit records lies with the Internal Audit Department. This structure supports the independence of the auditing process and ensures that records are handled by the entity that has the authority and expertise to manage them effectively.