Question 336 - IIA-CIA-Part2 discussion

When developing the objectives for an assurance engagement in a newly acquired subsidiary, the most critical items to consider are the organizational strategy, objectives, risks, control framework, and the expectations of stakeholders regarding the audit. This holistic approach ensures that the internal audit aligns with the broader goals and risk management processes of the organization, providing a comprehensive evaluation of the subsidiary's operations within the context of the entire entity. Organizational Strategy and Objectives: Understanding the overarching goals and strategic direction of the organization helps to align the audit objectives with business priorities and ensures that the subsidiary's operations are evaluated in the context of their contribution to these goals. Risks: Identifying and assessing the risks associated with the subsidiary is essential for focusing audit efforts on areas that could significantly impact the organization. This involves understanding both inherent and residual risks. Control Framework: Evaluating the existing control framework within the subsidiary helps determine the adequacy and effectiveness of controls in mitigating identified risks. Stakeholder Expectations: Considering what stakeholders expect from the audit helps in shaping objectives that address key concerns and provide valuable insights, fostering greater acceptance and implementation of audit recommendations. This comprehensive approach ensures the audit is relevant, targeted, and capable of adding significant value to the organization by addressing key risk areas and strategic objectives.

The Institute of Internal Auditors (IIA) Standards

IIA Practice Guide: Formulating and Expressing Internal Audit Opinions