The chief audit executive (CAE) is responsible for disclosing instances of nonconformance that impact the overall scope or operation of the internal audit activity, including failure to obtain an external assessment within a five-year period, to senior management and the board