ExamGecko
Question list
Search
Search

List of questions

Search

Question 624 - IIA-CIA-Part1 discussion

Report
Export

What would be the proper sequence of steps for an internal auditor to take in order to draw a conclusion on internal control effectiveness and adequacy after ascertaining the key controls?

A.

Evaluate the adequacy of the controls and then test the controls for effectiveness.

Answers
A.

Evaluate the adequacy of the controls and then test the controls for effectiveness.

B.

Test the controls for effectiveness and then evaluate the adequacy of the controls.

Answers
B.

Test the controls for effectiveness and then evaluate the adequacy of the controls.

C.

Identify risks and then evaluate the controls for effectiveness.

Answers
C.

Identify risks and then evaluate the controls for effectiveness.

D.

Evaluate the controls for effectiveness and then assess the risks in the area.

Answers
D.

Evaluate the controls for effectiveness and then assess the risks in the area.

Suggested answer: A

Explanation:

The proper sequence is to first evaluate the adequacy of the controls to ensure they are appropriately designed to mitigate risks. After confirming their design, the next step is to test the controls to verify they are operating effectively in practice.

Reference:

IIA Standard 2120: Risk Management.

COSO Internal Control-Integrated Framework.

asked 03/11/2024
Karl Ranson
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first