ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 171 - IIA-CIA-Part2 discussion

Report
Export

Some lime after the final audit report was issued, the engagement supervisor teamed that several internal control deficiencies were not remedied, despite management's previous agreement to remedy them According to IIA guidance, which of the following is the most appropriate response'5

A.
The engagement supervisor must notify the chief audit executive (CAE) that the deficiencies have not been rectified
Answers
A.
The engagement supervisor must notify the chief audit executive (CAE) that the deficiencies have not been rectified
B.
The engagement supervisor should rely on professional judgment as to whether the CAE should be informed, or the management action plan should be adjusted
Answers
B.
The engagement supervisor should rely on professional judgment as to whether the CAE should be informed, or the management action plan should be adjusted
C.
The engagement supervisor should rely on his negotiation skills and issue an ultimatum to management to remedy the control deficiencies
Answers
C.
The engagement supervisor should rely on his negotiation skills and issue an ultimatum to management to remedy the control deficiencies
D.
Ensure that these deficiencies are captured in the documentation as high-priority areas to be reviewed during the next audit.
Answers
D.
Ensure that these deficiencies are captured in the documentation as high-priority areas to be reviewed during the next audit.
Suggested answer: A

Explanation:

According to the International Standards for the Professional Practice of Internal Auditing, the CAE must be kept informed of significant issues and deficiencies that are not addressed by management. Standard 2600 - Communicating the Acceptance of Risks requires the CAE to report any situation where management has accepted a level of risk that may be unacceptable to the organization. If the engagement supervisor learns that agreed-upon remedial actions have not been implemented, the CAE needs to be notified to determine further steps, ensuring that risks are managed appropriately and in alignment with the organization's risk tolerance. This response aligns with the internal audit function's responsibility to follow up on management's corrective actions.

Reference: The IIA's International Standards for the Professional Practice of Internal Auditing, Standard 2600 - Communicating the Acceptance of Risks.

asked 18/09/2024
benakli rabah
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first