When internal auditors perform audits they detect issues which are usually called ‘findings’ or ‘observations’. They then seek to identify a recommendation to remediate the observation. In many cases, internal auditors will recommend a course of action that merely addresses a symptom (indicator) of the problem, rather than addressing the initial failure.
If internal auditors do not find the root cause, issues will continue to occur and future audit reports will continue to report the same issues