ExamGecko
Home Home / IIA / IIA-CIA-Part1

IIA IIA-CIA-Part1 Practice Test - Questions Answers, Page 60

Question list
Search
Search

List of questions

Search

Related questions











According to IIA guidance, which of the following statements is true regarding consulting engagements performed by the internal audit activity?

A.

Consulting engagements typically involve four or five parties: the internal audit activity, engagement client, senior management, board, and sometimes the external auditor.

A.

Consulting engagements typically involve four or five parties: the internal audit activity, engagement client, senior management, board, and sometimes the external auditor.

Answers
B.

The scope of a consulting engagement is determined by either the engagement supervisor or chief audit executive, and it is finalized prior to beginning fieldwork.

B.

The scope of a consulting engagement is determined by either the engagement supervisor or chief audit executive, and it is finalized prior to beginning fieldwork.

Answers
C.

According to the Standards, internal auditors are permitted to carry out certain management functions during a consulting engagement.

C.

According to the Standards, internal auditors are permitted to carry out certain management functions during a consulting engagement.

Answers
D.

A preliminary risk assessment may not be needed for consulting engagements, because the expectations and objectives of the engagement are determined by the engagement client.

D.

A preliminary risk assessment may not be needed for consulting engagements, because the expectations and objectives of the engagement are determined by the engagement client.

Answers
Suggested answer: B

Explanation:

According to IIA guidance, the scope of a consulting engagement is determined by either the engagement supervisor or the chief audit executive (CAE), and it is finalized before beginning fieldwork. This ensures that the objectives, deliverables, and expectations are clearly defined and agreed upon by all parties involved. This clear definition helps guide the consulting engagement, ensuring that it meets the client's needs and aligns with the internal audit activity's capabilities.

The Institute of Internal Auditors (IIA) Standards and Practice Advisories.

IIA's International Professional Practices Framework (IPPF).

'Internal Auditing: Assurance & Advisory Services' by IIA, Chapter on Consulting Services.

According to HA guidance, if an internal auditor suspects fraud during an assurance engagement, what should the auditor do first?

A.

Recommend parties involved to be sanctioned in accordance with the organization's policy.

A.

Recommend parties involved to be sanctioned in accordance with the organization's policy.

Answers
B.

Determine whether any additional audit work needs to be performed.

B.

Determine whether any additional audit work needs to be performed.

Answers
C.

Launch an investigation to obtain details of the fraud and parties involved.

C.

Launch an investigation to obtain details of the fraud and parties involved.

Answers
D.

Request that the responsible process owner remediate the issue immediately.

D.

Request that the responsible process owner remediate the issue immediately.

Answers
Suggested answer: B

Explanation:

When an internal auditor suspects fraud during an assurance engagement, the first step should be to determine whether any additional audit work needs to be performed. This involves assessing the potential scope and impact of the suspected fraud and deciding on the appropriate audit procedures to confirm or refute the suspicion. This step is crucial to gather sufficient information before taking further actions.

Option A: Recommending sanctions is premature without confirming the fraud.

Option C: Launching an investigation is a subsequent step that may require coordination with fraud experts.

Option D: Requesting immediate remediation is also premature without confirming the fraud.

IIA Standard 1220: Due Professional Care.

IIA Practice Guide: Internal Auditing and Fraud.

A new chief audit executive wants to develop a formal internal control framework for her organization. She uses globally accepted frameworks as a guide. Which of the following would she likely find critical in creating the new framework for her organization?

A.

Independent assessments.

A.

Independent assessments.

Answers
B.

Continuous monitoring.

B.

Continuous monitoring.

Answers
C.

Business continuity and backups.

C.

Business continuity and backups.

Answers
D.

Organization wide objectives.

D.

Organization wide objectives.

Answers
Suggested answer: D

Explanation:

In developing a formal internal control framework, globally accepted frameworks such as COSO or COBIT emphasize the importance of organization-wide objectives. These objectives provide a foundation for aligning internal controls with the organization's goals, ensuring comprehensive coverage and relevance of the control framework.

Option A: Independent assessments are part of the assurance process but not the foundation of the framework.

Option B: Continuous monitoring is a control activity within the framework.

Option C: Business continuity and backups are specific control activities but not foundational elements of the framework.

COSO Internal Control -- Integrated Framework.

COBIT Framework for IT Governance and Control.

A global manufacturing company has three regional offices. The chief audit executive (CAE) is concerned about the cost of an upcoming external quality assessment of the internal audit activity. The last external assessment was performed six years ago. Recently, the internal audit staff at one of the regional offices performed an internal assessment. To ensure conformance with the Standards, what is the most appropriate action for the CAE to take?

A.

Request from the audit committee an additional budget and an extension so that the external assessment could be performed next year.

A.

Request from the audit committee an additional budget and an extension so that the external assessment could be performed next year.

Answers
B.

Review the results of the internal assessment, identify weaknesses, and implement improvements at the remaining offices.

B.

Review the results of the internal assessment, identify weaknesses, and implement improvements at the remaining offices.

Answers
C.

Request the regional office that performed the internal assessment to perform an assessment of the remaining offices.

C.

Request the regional office that performed the internal assessment to perform an assessment of the remaining offices.

Answers
D.

Request that an external assessor validate the results of the internal assessment and review the remaining offices.

D.

Request that an external assessor validate the results of the internal assessment and review the remaining offices.

Answers
Suggested answer: D

Explanation:

To ensure conformance with the Standards, the most appropriate action for the CAE is to request that an external assessor validate the results of the internal assessment and review the remaining offices. This approach ensures an independent and objective evaluation, as required by IIA Standard 1312, which mandates external assessments at least once every five years.

Option A: Delaying the external assessment does not comply with the required five-year cycle.

Option B: Implementing improvements based on the internal assessment alone lacks external validation.

Option C: Having a regional office perform assessments does not meet the requirement for an external assessment.

IIA Standard 1312: External Assessments.

IIA Quality Assessment Manual.

Which of the following describes a responsibility of operating management in an organization's corporate social responsibility (CSR) efforts?

A.

Responsible for implementing CSR principles and overseeing of CSR performance.

A.

Responsible for implementing CSR principles and overseeing of CSR performance.

Answers
B.

Responsible for performing periodic internal self-verifications of reported CSR results.

B.

Responsible for performing periodic internal self-verifications of reported CSR results.

Answers
C.

Responsible for performing analysis and comparison of CSR reports and performance.

C.

Responsible for performing analysis and comparison of CSR reports and performance.

Answers
D.

Responsible for ongoing CSR reporting and accomplishing of performance targets.

D.

Responsible for ongoing CSR reporting and accomplishing of performance targets.

Answers
Suggested answer: A

Explanation:

Operating management in an organization is responsible for implementing CSR principles and overseeing CSR performance (Option A). This involves ensuring that the CSR initiatives align with the organization's goals and values, and that these initiatives are executed effectively. Management's role includes setting objectives, developing strategies, and monitoring the progress of CSR activities. This responsibility is outlined in various frameworks and guidelines for corporate social responsibility, emphasizing the need for management to take an active role in CSR implementation and oversight.

Reference:

IIA Practice Guide: Internal Audit's Role in Corporate Social Responsibility

ISO 26000: Guidance on Social Responsibility

Which of the following relates to the concept of due professional care?

A.

An auditor attempts to obtain information needed to complete an assurance engagement but is denied access.

A.

An auditor attempts to obtain information needed to complete an assurance engagement but is denied access.

Answers
B.

The appointment of the chief audit executive is ratified by the board.

B.

The appointment of the chief audit executive is ratified by the board.

Answers
C.

An auditor demonstrates a good understanding of the steps involved in carrying out a consulting engagement.

C.

An auditor demonstrates a good understanding of the steps involved in carrying out a consulting engagement.

Answers
D.

The internal audit resource plan is only approved by the chief financial officer.

D.

The internal audit resource plan is only approved by the chief financial officer.

Answers
Suggested answer: C

Explanation:

The concept of due professional care in internal auditing involves applying the care and skill expected of a reasonably prudent and competent auditor. This includes understanding the appropriate steps and techniques for various types of engagements, including consulting engagements. Demonstrating a good understanding of the steps involved in carrying out a consulting engagement (Option C) aligns with the IIA Standard 1220: Due Professional Care, which requires internal auditors to apply the necessary care and skill in their work. This understanding is essential for executing their duties effectively and ensuring that engagements are conducted with appropriate rigor and thoroughness.

Reference:

IIA Standards, Standard 1220: Due Professional Care

IIA's International Professional Practices Framework (IPPF)

The same internal auditor has audited the regional purchasing department annually for the last three years. The audits have shown several significant control deficiencies that have not been corrected by management. New management is in charge of this regional purchasing department, and it is time to audit the department again. What concerns should be considered prior to assigning the audit to the same auditor?

A.

Intimidation threats may compromise the auditor's objectivity due to multiple negative audit reports completed by the auditor.

A.

Intimidation threats may compromise the auditor's objectivity due to multiple negative audit reports completed by the auditor.

Answers
B.

The auditor has reviewed the department annually for the last three years, leading to familiarity, which can impact the internal audit activity's independence.

B.

The auditor has reviewed the department annually for the last three years, leading to familiarity, which can impact the internal audit activity's independence.

Answers
C.

A negative cognitive bias may be in place that affects the employee's objectivity due to the recent audits with uncorrected control deficiencies.

C.

A negative cognitive bias may be in place that affects the employee's objectivity due to the recent audits with uncorrected control deficiencies.

Answers
D.

The auditor may have formed a cultural bias, as the department under review is in the auditor's geographic area.

D.

The auditor may have formed a cultural bias, as the department under review is in the auditor's geographic area.

Answers
Suggested answer: B

Explanation:

When an internal auditor has audited the same department repeatedly, familiarity threat is a significant concern. The IIA Standards emphasize maintaining objectivity and avoiding circumstances that could impair the auditor's unbiased attitude. Auditing the same department annually for several years can lead to familiarity, which can compromise the internal audit activity's independence and objectivity (Option B). According to Standard 1130: Impairment to Independence or Objectivity, auditors must avoid auditing areas where repeated engagements might lead to a lack of objectivity due to familiarity.

Reference:

IIA Standards, Standard 1130: Impairment to Independence or Objectivity

IIA Practice Guide: Independence and Objectivity

In a small company with a small budget, the board and senior management asked the chief audit executive (CAE) to develop specific controls prompted by a new regulatory requirement affecting a specific process. The CAE was also directed to report functionally to senior management. An audit engagement on this process was already set in the internal audit plan. Which of the following represents an impairment to the internal audit activity's independence?

A.

The development of controls by the CAE.

A.

The development of controls by the CAE.

Answers
B.

The audit engagement regarding this process.

B.

The audit engagement regarding this process.

Answers
C.

The functional reporting of the CAE to senior management.

C.

The functional reporting of the CAE to senior management.

Answers
D.

The small budget.

D.

The small budget.

Answers
Suggested answer: A

Explanation:

The internal audit activity's independence is impaired if the chief audit executive (CAE) is involved in developing controls, as this constitutes a management function. According to IIA standards, internal auditors must remain independent and objective, avoiding roles that involve direct management responsibilities. Developing specific controls prompted by a new regulatory requirement blurs the lines between management and audit functions, impairing the ability of the internal audit activity to later provide an objective assessment of those controls.

IIA Standard 1112: Chief Audit Executive Roles Beyond Internal Auditing

IIA Standard 1100: Independence and Objectivity

During the planning stage of an assurance engagement, a payroll clerk informed the internal auditor that he is often asked to add new employees to the payroll without any formal new-hire documentation from human resources. The auditor is concerned that this increases the risk for fraud. To complete engagement planning, which of the following is the most appropriate next step for the auditor to take?

A.

Increase the sample size to be tested, ensuring a thorough review of the payroll records.

A.

Increase the sample size to be tested, ensuring a thorough review of the payroll records.

Answers
B.

Advise the chief audit executive of the clerk's assertion, despite the lack of supporting evidence.

B.

Advise the chief audit executive of the clerk's assertion, despite the lack of supporting evidence.

Answers
C.

Ask the clerk to provide a list of any suspicious new employee names on the payroll.

C.

Ask the clerk to provide a list of any suspicious new employee names on the payroll.

Answers
D.

Investigate the matter further to understand precisely how many payroll records were affected.

D.

Investigate the matter further to understand precisely how many payroll records were affected.

Answers
Suggested answer: B

Explanation:

When a payroll clerk informs the auditor of potential issues like adding new employees to the payroll without proper documentation, it is essential to escalate this concern appropriately. The internal auditor should inform the chief audit executive (CAE) of the assertion, as it raises a significant red flag regarding potential fraud or control weaknesses. This step ensures that the CAE is aware of the situation and can decide on the necessary follow-up actions, such as further investigation or adjusting the audit scope to address the risk.

IIA Standard 1220: Due Professional Care

IIA Standard 2120: Risk Management

Which of the following is the internal audit activity expected to do with respect to the organization's governance processes?

A.

Formally audit all governance activities.

A.

Formally audit all governance activities.

Answers
B.

Provide strategic guidance on the organizational processes to senior management.

B.

Provide strategic guidance on the organizational processes to senior management.

Answers
C.

Achieve agreement with the board regarding the range of activities, depth of review, and time period to include in the assessment.

C.

Achieve agreement with the board regarding the range of activities, depth of review, and time period to include in the assessment.

Answers
D.

Audit against the governance structures and practices widely used in the industry.

D.

Audit against the governance structures and practices widely used in the industry.

Answers
Suggested answer: C

Explanation:

Internal audit activities are expected to contribute to the improvement of the organization's governance processes. To effectively fulfill this role, internal auditors must work with the board to agree on the scope of their governance assessments. This includes defining the range of activities to be reviewed, the depth of these reviews, and the time period covered. Achieving this agreement ensures that the internal audit's evaluation aligns with the board's expectations and the organization's strategic objectives, thereby enhancing the overall governance framework.

IIA Standard 2110: Governance

IIA Practice Guide: Assessing Organizational Governance

Total 758 questions
Go to page: of 76