IIA IIA-CIA-Part2 Practice Test - Questions Answers, Page 27
List of questions
Related questions
Question 261

The human resources (HR) department was last reviewed three years ago and is due for an assurance engagement after undergoing recent process changes. Which of the following would the most effective option identify the HR department's risks and controls?
Explanation:
The most effective way to identify the HR department's risks and controls, especially after recent process changes, is to discuss the department's present strategies and objectives with the head of the HR department. This approach allows the auditor to gain current and relevant insights directly from the person most knowledgeable about the department's current operations, risks, and controls. It ensures that the auditor understands the current environment, any new challenges, and the specific controls in place to mitigate risks. This method is more comprehensive and current compared to reviewing past reports or generalized organizational frameworks, which might not reflect recent changes accurately.
The Institute of Internal Auditors (IIA) Standard 2010 -- Planning: 'The chief audit executive must establish risk-based plans to determine the priorities of the internal audit activity, consistent with the organization's goals.'
IIA Practice Guide on 'Engaging with Stakeholders'
Question 262

According to IIA guidance, when of the Mowing statements is true regarding an engagement supervisor's use of review notes?
Explanation:
According to the IIA guidance, engagement supervisors' review notes are used during the audit process to ensure thoroughness and accuracy. Once these review notes have been addressed, they can be removed from the final documentation. This practice ensures that the final audit report is clear and concise, containing only the necessary documentation to support audit findings and conclusions. The review notes are considered part of the working papers during the review process but do not need to be retained in the final audit documentation once all issues have been resolved.
The Institute of Internal Auditors (IIA) Standard 2330 -- Documenting Information: 'Internal auditors must document relevant information to support the conclusions and engagement results.'
IIA Practice Guide on 'Audit Documentation'
Question 263

Which of the following items, included in the preliminary audit communication would be most useful for management to formulate action plans in response to audit recommendations?
Explanation:
In the preliminary audit communication, the condition is the most useful item for management to formulate action plans in response to audit recommendations. The condition describes the existing state or issue identified during the audit. It provides a clear and specific description of what is wrong or what needs improvement, which is essential for management to understand the problem and take appropriate corrective actions. While audit objectives, scope, and observation ratings are important, the condition directly points to the area that needs attention and improvement.
The Institute of Internal Auditors (IIA) Standard 2410 -- Criteria for Communicating: 'Communications must include the engagement's objectives and scope as well as applicable conclusions, recommendations, and action plans.'
IIA Practice Guide on 'Communicating Audit Results'
Question 264

In which of following scenarios is the internal auditor performing benchmarking?
Explanation:
Benchmarking in internal auditing involves comparing the performance or practices of the audited entity against a standard or best practice, which often involves using information from other organizations or sources as a reference. This process helps identify areas for improvement and set performance targets. Thus, comparing the collected information with similar information from another source is the correct definition of benchmarking.
The Institute of Internal Auditors (IIA) Practice Guide: Internal Audit and Organizational Performance
IIA Standard 1220 - Due Professional Care
Question 265

An internal auditor is planning an engagement at a financial institution. Toe engagement objective is to identify whether loans were granted in accordance with the organization's policies. When of the following approaches would provide the auditor with the best information?
Explanation:
To determine if loans were granted in accordance with the organization's policies, the most effective approach is to validate a sample of loans against the applicable underwriting guidelines. This method allows the auditor to directly assess compliance with the specific criteria set out in the organization's loan granting policies, providing clear evidence on whether the loans meet the required standards.
The Institute of Internal Auditors (IIA) Practice Guide: Auditing Credit Risk Management
IIA Standard 2210 - Engagement Objectives
Question 266

An internal auditor wants to assess the completeness of sales invoices issued by the organization over a period of time Providing that at the necessary data and analytics software is which of the following types of analyse would be appropriate to satisfy the auditor's objective?
Explanation:
A gap analysis is used to assess the completeness of sales invoices by identifying any missing records within a sequence. This technique helps in pinpointing any sales that might have been omitted or unrecorded during the invoicing process. By comparing expected sequences with actual recorded transactions, the auditor can identify discrepancies and ensure all sales are accounted for.
The Institute of Internal Auditors (IIA) Practice Guide: Data Analytics
IIA Standard 2320 - Analysis and Evaluation
Question 267

Which of the following is true regarding the monitoring of internal audit activities?
Explanation:
The form and content of monitoring policies can indeed vary depending on the industry and the specific requirements of the organization. While all internal audit activities require some level of monitoring to ensure effectiveness and compliance with standards, the specific approach and documentation may differ based on industry norms, regulatory requirements, and organizational size and complexity.
The Institute of Internal Auditors (IIA) Practice Guide: Quality Assurance and Improvement Program
IIA Standard 1300 - Quality Assurance and Improvement Program
Question 268

A corporate merger decision prompts the cruel audit executive (CAE) to propose interim changes lo the existing annual audit plan to account for emerging risks. When of the following is the most appropriate action for the CAE to take regarding the changes made to the audit plan?
Explanation:
According to the International Standards for the Professional Practice of Internal Auditing (Standards) issued by The Institute of Internal Auditors (IIA), the Chief Audit Executive (CAE) must communicate and obtain approval from the board for significant changes to the audit plan. A corporate merger is a significant event that introduces emerging risks, necessitating an interim adjustment to the audit plan. The CAE's responsibility includes ensuring that the board is informed and approves the revised audit plan to address these new risks adequately.
The Institute of Internal Auditors (IIA) Standard 2020 -- Communication and Approval: 'The chief audit executive must communicate the internal audit activity's plans and resource requirements, including significant interim changes, to senior management and the board for review and approval.'
Question 269

Which of the following is a significant governance issue that should be reported by the chief audit executive to the board?
Explanation:
A significant governance issue that must be reported to the board is the absence of a formal risk management and control process, with risk management being solely the responsibility of operational managers. Effective governance requires a structured risk management framework overseen at the highest levels of the organization. The lack of such a process indicates a critical deficiency that can have severe implications for the organization's ability to manage and mitigate risks.
The Institute of Internal Auditors (IIA) Standard 2110 -- Governance: 'The internal audit activity must assess and make appropriate recommendations to improve the organization's governance processes.'
Question 270

Which of the following is one of the differences between probability-proportional-to-size (PPS) and attribute sampling?
Explanation:
Probability-proportional-to-size (PPS) sampling is a technique used to reach conclusions regarding monetary amounts in a population. It is designed to handle variable sampling by focusing on monetary units, making it appropriate for testing account balances. On the other hand, attribute sampling is used to assess the rate of occurrence of a specific characteristic or attribute in a population, such as compliance with a control procedure, and does not focus on monetary amounts.
The Institute of Internal Auditors (IIA) Practice Guide on 'Audit Sampling'
Generally Accepted Auditing Standards (GAAS)
Question