ExamGecko
Question list
Search
Search

List of questions

Search

Question 649 - IIA-CIA-Part1 discussion

Report
Export

Which of the following should be considered in developing a risk and control model for use in an engagement?

A.

The risk and control model should be globally accepted by the profession.

Answers
A.

The risk and control model should be globally accepted by the profession.

B.

The risk and control model should be strictly adhered to in performing the engagement.

Answers
B.

The risk and control model should be strictly adhered to in performing the engagement.

C.

The risk and control model should be tailored to the organization that will be the subject of the engagement.

Answers
C.

The risk and control model should be tailored to the organization that will be the subject of the engagement.

D.

The risk and control model should be developed individually by the auditor for use on individual audit projects within the planned engagement.

Answers
D.

The risk and control model should be developed individually by the auditor for use on individual audit projects within the planned engagement.

Suggested answer: C

Explanation:

Developing a risk and control model for an engagement should take into account the specific characteristics, processes, and risks of the organization being audited. Tailoring the model ensures that the controls are relevant and effective for the specific context of the organization, leading to a more accurate and useful audit outcome.

Reference:

IIA's International Professional Practices Framework (IPPF), particularly on risk-based auditing and control frameworks.

asked 03/11/2024
Richard Villanueva
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first