Usually, the decision to notify parties outside the client’s organization regarding noncompliance with laws and regulations is the responsibility of the

Management

Explanation:

Sometimes in the course of discharging his duties, an auditor might discover a case of non-compliance with laws and regulations. In such situations, he is expected to report the issue to the governing body or management of the organization who in turn notify parties outside the client's organization. This might imply reporting to the appropriate law enforcement agencies who now investigate the matter.

The auditor should ensure that he is keeping to the code of confidentiality before proceeding on such a case. The management is expected to review the report to determine if the action was indeed non-compliant with the laws before proceeding on the next call of action.