IIA IIA-CIA-Part2 Exam With Confidence Using Practice Dumps

The Chief Audit Executive (CAE) would be justified in reporting the situation to the organization's board if, in the opinion of the CAE, the level of residual risk assumed by senior management is too high (1). Even though the new process of obtaining written approval by the vice president of sales addresses the issue, if the CAE believes that the residual risk remains too high, it is their duty to report it to the board. The cost of implementing a preventive control or the compliance with the new process does not change the responsibility of the CAE to report significant residual risks to the board.

The Institute of Internal Auditors (IIA) Standard 2600 – Communicating the Acceptance of Risks: "When the chief audit executive believes that senior management has accepted a level of residual risk that may be unacceptable to the organization, the chief audit executive must discuss the matter with senior management. If the decision regarding residual risk is not resolved, the chief audit executive must report the matter to the board for resolution."

IIA Practice Guide on "Communicating Risk Acceptance to the Board"

Nonstatistical sampling allows auditors to use their professional judgment to determine the sample size and select the items to be tested. Unlike statistical sampling, which relies on probabilistic methods to determine the sample size and selection, nonstatistical sampling is more flexible and can be tailored to the specific circumstances of the audit engagement.

IIA References:

IIA Standard 2320: Analysis and Evaluation suggests that internal auditors should apply appropriate methods to analyze data and draw conclusions. Nonstatistical sampling allows for the application of professional judgment, which can be advantageous in certain audit situations where rigid statistical methods may not be practical or necessary.

The Practice Guide on Sampling discusses the differences between statistical and nonstatistical sampling, highlighting that nonstatistical sampling relies more on the auditor’s judgment, which can be beneficial in certain contexts.

Given this, the correct answer is C. Nonstatistical sampling provides for the use of subjective judgment in determining the sample size.

Flowcharts provide a visual depiction of the processes in the area under review, helping internal auditors and stakeholders understand the workflow and identify key control points. Additionally, flowcharts highlight control points, which assist auditors in evaluating the design of controls. These visual tools make it easier to identify potential gaps or weaknesses in the control design and understand how different processes and controls interact. They do not reduce the need for testing whether employees are observing internal control processes or directly prioritize internal control design weaknesses.

The IIA's International Standards for the Professional Practice of Internal Auditing, Standard 2201 - Planning Considerations.