CIA Changed IIA-CIA-Part2 Questions

Although technical specifications, confidentiality, and management approval were in place, the criteria for awarding the tender were not applied consistently. While economic feasibility was the stated criterion, the final selection was based on newest technology. This undermines transparency and equal treatment of bidders, key principles of fair procurement. Option D is therefore correct.

Retained earnings represent the cumulative profits reinvested in the organization rather than distributed as dividends. They reflect the organization’s ability to generate resources internally, supporting working capital, expansion, and long-term sustainability.

Option A is incorrect: retained earnings are not the same as dividends.

Option B is incorrect: retained earnings are not equal to excess cash.

Option D is incorrect: rating agencies use broader financial measures, not retained earnings alone.

Thus, the best explanation is Option C: retained earnings show that the organization has been able to generate and reinvest resources from its own operations.

According to IIA guidance, the internal audit plan should be based on an assessment of risks to the organization (1), designed to determine the effectiveness of the organization ' s risk management process (2), and aligned with the organization ' s goals (4). The development of the audit plan is typically the responsibility of the chief audit executive, often with input from senior management and the audit committee, rather than being solely developed by senior management (3). References: IIA Standard 2010 – Planning, IIA Practice Guide – Developing the Internal Audit Plan

According to ISO 31000, the risk management framework is scalable and applicable to organizations of all sizes, including small entities. The framework ' s principles are designed to be flexible and adaptable, ensuring they can be effectively implemented regardless of the organization ' s size.

Scalability: The principles and guidelines of ISO 31000 can be tailored to fit the specific context, resources, and complexity of any organization, making it a universal standard.

Flexibility: The framework supports organizations in integrating risk management practices into their operations at a level that suits their size and complexity.

Effectiveness: Regardless of the organization ' s size, the framework aims to enhance risk management practices and support better decision-making.