ExamGecko
Home Home / IIA / IIA-CIA-Part1

IIA IIA-CIA-Part1 Practice Test - Questions Answers, Page 67

Question list
Search
Search

List of questions

Search

The internal auditor of a small manufacturer noted that the accounting department has insufficient staff to achieve proper segregation of duties. What type of controls would the auditor likely recommend to management to specifically address this problem?

A.

Entity-level.

A.

Entity-level.

Answers
B.

Preventive.

B.

Preventive.

Answers
C.

Directive.

C.

Directive.

Answers
D.

Compensating.

D.

Compensating.

Answers
Suggested answer: D

Explanation:

In situations where proper segregation of duties is not achievable due to insufficient staffing, internal auditors recommend the implementation of compensating controls. Compensating controls are additional procedures or safeguards designed to reduce the risk associated with insufficient segregation of duties. These controls do not prevent errors or fraud from occurring but aim to detect them in a timely manner if they do occur.

For instance, in a small manufacturer where the accounting department cannot separate tasks adequately due to limited staff, the auditor might suggest:

Enhanced supervisory reviews: Managers or supervisors closely review and approve transactions and reconciliations performed by the staff.

Periodic independent reviews: Regular audits or reviews by internal auditors or third-party auditors to ensure transactions are proper and in compliance with company policies.

Use of technology: Implementing automated controls that require multiple approvals for significant transactions.

Rotation of duties: Regularly rotating employees' responsibilities to prevent familiarity and collusion.

These measures help mitigate the risks that arise from the lack of segregation of duties, providing reasonable assurance that financial records are accurate and that fraud or errors are detected promptly.

The Institute of Internal Auditors (IIA) Standards and Practice Advisories.

COSO Internal Control -- Integrated Framework.

'Internal Auditing: Assurance & Advisory Services' by IIA, Chapter on Control Activities and Segregation of Duties.

During a monthly internal audit staff meeting, the chief audit executive (CAE) decided to reinforce the importance of internal audit staff being objective in their work. Which of the following examples would be most appropriate for the CAE to include as part of the meeting presentation?

A.

Statistical sampling techniques should always be used to pull unbiased sampling for testing.

A.

Statistical sampling techniques should always be used to pull unbiased sampling for testing.

Answers
B.

Fieldwork completed by internal auditors should be appropriately reviewed.

B.

Fieldwork completed by internal auditors should be appropriately reviewed.

Answers
C.

Internal auditors should avoid using the lunch room simultaneously with audit clients.

C.

Internal auditors should avoid using the lunch room simultaneously with audit clients.

Answers
D.

During the audit review period, there should be no nonaudit dialogues with the audit client.

D.

During the audit review period, there should be no nonaudit dialogues with the audit client.

Answers
Suggested answer: B

Explanation:

Emphasizing the review of fieldwork completed by internal auditors is crucial for maintaining objectivity. This practice ensures that work is independently checked, helping to prevent bias or errors in the audit process. Regular review by a different auditor or a supervisor can help maintain objectivity and adherence to auditing standards.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 1311 - Internal Assessments, and Standard 1320 - Reporting on the Quality Assurance and Improvement Program.

Which of the following requests, if accepted by the internal audit activity, would impair its independence?

A.

A request to develop workshops on corporate governance for management.

A.

A request to develop workshops on corporate governance for management.

Answers
B.

A request to act as liaison with external auditors.

B.

A request to act as liaison with external auditors.

Answers
C.

A request to determine appropriate risk management responses for management.

C.

A request to determine appropriate risk management responses for management.

Answers
D.

A request to provide counseling services on ethical matters.

D.

A request to provide counseling services on ethical matters.

Answers
Suggested answer: C

Explanation:

If the internal audit activity accepts a request to determine appropriate risk management responses for management, it would impair its independence. The role of internal audit is to provide assurance and consulting services, but not to take on management responsibilities such as making decisions on risk responses. Doing so would compromise the objectivity and independence required of the internal audit function.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 1100 - Independence and Objectivity, and Standard 1112 - Chief Audit Executive Roles Beyond Internal Auditing.

Which of the following situations is most likely to prompt the internal audit activity to disclose its nonconformance with the Standards?

A.

One of the organization's senior internal auditors owns a side business, though to date, no sales have been made to this business.

A.

One of the organization's senior internal auditors owns a side business, though to date, no sales have been made to this business.

Answers
B.

The annual internal audit plan includes performance audits of main business processes, but reviews of high-risk development projects were not considered.

B.

The annual internal audit plan includes performance audits of main business processes, but reviews of high-risk development projects were not considered.

Answers
C.

The internal audit activity committed to carrying out an audit of documentation on investment hedging, and a hedging expert was contracted to assist with the engagement.

C.

The internal audit activity committed to carrying out an audit of documentation on investment hedging, and a hedging expert was contracted to assist with the engagement.

Answers
D.

A periodic quality self-assessment of the internal audit activity identified a number of improvement areas with regard to key performance indicators.

D.

A periodic quality self-assessment of the internal audit activity identified a number of improvement areas with regard to key performance indicators.

Answers
Suggested answer: B

Explanation:

The internal audit activity must align its activities with the organization's risks. Not considering high-risk development projects in the audit plan could indicate nonconformance with the Standards, specifically regarding risk-based planning. The Standards require internal audit to consider all significant risks when developing the audit plan, and failing to do so may require disclosure of nonconformance.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2010 - Planning, and Standard 1300 - Quality Assurance and Improvement Program.

According to IIA guidance, which of the following is accurate regarding the chief audit executive's (CAE's) requirement to report the results of quality assessments?

1. The CAE must report the results of external assessments at least annually.

2. The CAE must report the results of ongoing monitoring at least annually.

3. The CAE must report the results of quality assessments to senior management.

4. The CAE must report the results of quality assessments to the board.

A.

1 and 3 only.

A.

1 and 3 only.

Answers
B.

2 and 4 only.

B.

2 and 4 only.

Answers
C.

1,2. and 3.

C.

1,2. and 3.

Answers
D.

2,3, and 4.

D.

2,3, and 4.

Answers
Suggested answer: D

Explanation:

According to IIA guidance, the chief audit executive (CAE) is required to report the results of ongoing monitoring and periodic quality assessments to both senior management and the board at least annually. This ensures transparency and allows for any necessary actions to improve the quality and performance of the internal audit activity.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 1311 - Internal Assessments, Standard 1320 - Reporting on the Quality Assurance and Improvement Program, and Standard 1312 - External Assessments.

Which of the following is an indicator that the internal audit activity does not fully conform with the Standards?

A.

The quality assurance and improvement program identified several opportunities for the internal audit activity to make improvements.

A.

The quality assurance and improvement program identified several opportunities for the internal audit activity to make improvements.

Answers
B.

In lieu of an external assessment, the internal audit activity performed a self-assessment with independent external validation.

B.

In lieu of an external assessment, the internal audit activity performed a self-assessment with independent external validation.

Answers
C.

During an internal quality assessment, it was identified that rotational auditors often perform consulting engagements for areas of the organization where they had previous responsibilities.

C.

During an internal quality assessment, it was identified that rotational auditors often perform consulting engagements for areas of the organization where they had previous responsibilities.

Answers
D.

External assessments are performed every five years by a competent internal audit team from the organization's parent company.

D.

External assessments are performed every five years by a competent internal audit team from the organization's parent company.

Answers
Suggested answer: C

Explanation:

The internal audit activity should avoid conflicts of interest and maintain independence and objectivity. Rotational auditors performing consulting engagements in areas where they had previous responsibilities can impair their objectivity and independence, which is a non-conformance with the IIA Standards.

Reference:

IIA Standard 1130 - Impairment to Independence or Objectivity.

IIA Standard 1100 - Independence and Objectivity.

Which risk management activity would cause the internal auditor to assume a management responsibility?

A.

Assessing management's acceptance of risk.

A.

Assessing management's acceptance of risk.

Answers
B.

Reviewing a cybersecurity risk report issued by management.

B.

Reviewing a cybersecurity risk report issued by management.

Answers
C.

Developing a list of emerging risks for management.

C.

Developing a list of emerging risks for management.

Answers
D.

Prioritizing risks for management.

D.

Prioritizing risks for management.

Answers
Suggested answer: D

Explanation:

Internal auditors must remain independent and should not take on management responsibilities. Prioritizing risks for management crosses this line and constitutes assuming a management role, which compromises the auditor's independence and objectivity.

Reference:

IIA Standard 1112 - Chief Audit Executive Roles Beyond Internal Auditing.

IIA Standard 1100 - Independence and Objectivity.

During an audit of an organization's accounts payable area, an internal auditor identified anomalies in the information examined that may indicate potential fraud. Which test should the auditor perform first to verify this?

A.

Verify the completeness and integrity of the data being analyzed.

A.

Verify the completeness and integrity of the data being analyzed.

Answers
B.

Identify duplicated organizational transactions.

B.

Identify duplicated organizational transactions.

Answers
C.

Analyze all transactions within the targeted area.

C.

Analyze all transactions within the targeted area.

Answers
D.

Check control totals that have may have been falsified.

D.

Check control totals that have may have been falsified.

Answers
Suggested answer: A

Explanation:

Before performing any detailed analysis to identify potential fraud, it is essential to first ensure that the data being analyzed is complete and accurate. This helps to ensure that subsequent tests and analyses are based on reliable information.

Reference:

IIA's International Professional Practices Framework (IPPF) - Standards related to data integrity and reliability.

IIA Standard 2320 - Analysis and Evaluation.

An internal audit of warehouse inventory revealed no material deficiencies. However, management later discovered fraud, which occurred during the period that was audited, and determined that a major control deficiency allowed the fraud to occur. Given management's discovery, which of the following statements is valid?

A.

The internal auditors violated the standard for due professional care because they did not detect the fraud, even though it occurred during the period that was reviewed.

A.

The internal auditors violated the standard for due professional care because they did not detect the fraud, even though it occurred during the period that was reviewed.

Answers
B.

The internal auditors should have had sufficient knowledge of fraud to identify red flags indicating possible fraud.

B.

The internal auditors should have had sufficient knowledge of fraud to identify red flags indicating possible fraud.

Answers
C.

The internal auditors could not have detected the fraud due to collusion among employees in the inventory unit.

C.

The internal auditors could not have detected the fraud due to collusion among employees in the inventory unit.

Answers
D.

The internal auditors are not responsible for considering fraud risk, which is a management responsibility.

D.

The internal auditors are not responsible for considering fraud risk, which is a management responsibility.

Answers
Suggested answer: B

Explanation:

Internal auditors are required to have sufficient knowledge to identify indicators of fraud. They should recognize red flags and investigate them further, even if their primary responsibility is not to detect fraud.

Reference:

IIA Standard 1210.A2 - Proficiency: Internal auditors must have sufficient knowledge to evaluate the risk of fraud.

IIA Practice Guide on Fraud and Internal Auditors.

A chief audit executive (CAE) is concerned that the internal audit activity is not receiving adequate training and continuing education. Which of the following approaches should the CAE take?

A.

Implement a uniform professional development plan for the internal audit activity.

A.

Implement a uniform professional development plan for the internal audit activity.

Answers
B.

Create a formal development agreement with each individual staff auditor.

B.

Create a formal development agreement with each individual staff auditor.

Answers
C.

Require each internal auditor to obtain the same professional certifications.

C.

Require each internal auditor to obtain the same professional certifications.

Answers
D.

Require training and developmental activities that are sponsored by The HA.

D.

Require training and developmental activities that are sponsored by The HA.

Answers
Suggested answer: A

Explanation:

A uniform professional development plan ensures that all internal auditors receive consistent and adequate training and continuing education. This approach helps to maintain a high standard of proficiency and competence within the internal audit activity.

Reference:

IIA Standard 1230 - Continuing Professional Development.

IIA Practice Guide on Developing a Professional Development Program.

Total 758 questions
Go to page: of 76