A chief audit executive (CAE) determined that operational management did not address an open internal control issue, which creates a risk of material misstateme...