Home / IIA / IIA-CIA-Part2

Question list

List of questions

Question 1

(0)

According to IIA guidance, which of the following actions might place the independence of the internal audit function in jeopardy?

Question 2

(0)

According to IIA guidance, which of the following would not be a consideration for the internal audit activity (IAA) when determining the need to follow-up on recommendations?

Question 3

(0)

Which of the following is an appropriate responsibility for the internal audit activity with regard to the organization's risk management program?

Question 4

(0)

Which of the following is a detective control for managing the risk of fraud?

Question 5

(0)

Which of the following is a justifiable reason for omitting advance client notice when planning an audit engagement?

Question 6

(0)

According to IIA guidance, organizations have the most influence on which element of fraud?

Question 7

(0)

The external auditor has identified a number of production process control deficiencies involving several departments. As a result, senior management has asked the internal audit activity to complet

Question 8

(0)

Which of the following is not a primary reason for outsourcing a portion of the internal audit activity?

Question 9

(0)

Which of the following statements about internal audit's follow-up process is true?

Question 10

(0)

A manufacturer is under contract to produce and deliver a number of aircraft to a major airline. As part of the contract, the manufacturer is also providing training to the airline's pilots. At the

Related questions

How should an internal auditor approach preparing a detailed risk assessment during engagement planning?

A newly promoted chief audit executive (CAE) is faced with a backlog of assurance engagement reports to review for approval. In an attempt to attach a priority for this review, the CAE scans the opinion statement on each report. According to IIA guidance, which of the following opinions would receive the lowest review priority? 1. Graded positive opinion. 2. Negative assurance opinion. 3. Limited assurance opinion. 4. Third-party opinion.

According to an internal audit observation, the organization's rules of record management require all contracts to be registered and stored in a specific electronic system. One subsidiary has thousands of client contracts on paper, which are kept in the office because there are not enough assistants to scan the contracts into the system. Which of the following component should be added to this observation?

After the team member who specialized in fraud investigations left the internal audit team, the chief audit executive decided to outsource fraud investigations to a third party service provider on an as needed basis. Which of the following is most likely to be a disadvantage of this outsourcing decision?

What is the primary reason that audit supervision includes approval of the engagement report?

Internal audit staff lacks the expertise to perform a fraud investigation engagement stemming from a whistleblowing incident. Which of the following is the most appropriate option for the chief audit executive?

According to the MA guidance, which of the following does the engagement work program test in a review of an organizational process?

An internal auditor wanted to determine whether company vehicles were being used for personal purposes She extracted a report that listed company vehicle numbers business units to which the vehicles are allocated travel dates, travel duration and mileage She then filtered the data for weekend dates Which of the following additional information would the auditor need?

During follow-up. the internal auditor discovered that operational management did not implement effective actions to address a significant control breach If the issue is left unresolved it may result in regulatory sanctions and damage the organization's reputation What is the most appropriate next step for the chief audit executive to lake?

A code of business conduct should include which of the following to increase its deterrent effect? 1. Appropriate descriptions of penalties for misconduct. 2. A notification that code of conduct violations may lead to criminal prosecution. 3. A description of violations that injure the interests of the employer. 4. A list of employees covered by the code of conduct.

Question 237 - IIA-CIA-Part2 discussion

An IT auditor is reviewing the access controls in an organization's accounting application. The auditor intends to deploy a tool that can help test the logical controls embedded in the system to ensure employee access is granted according to need. Which of the following would help achieve this objective?