IIA-CIA-Part2 Premium Exam Questions

When an internal auditor finds that there are no written policies regarding the treatment of suspense accounts, the most appropriate first response is to inquire with management about any undocumented policies or procedures that may be in place. This approach helps the auditor understand the existing practices and assess their adequacy. Jumping to conclusions without this understanding could lead to inaccurate audit findings. Ensuring that the auditor comprehensively understands all relevant practices is crucial before evaluating their effectiveness or making recommendations.References:

IIA Standard 2210: Engagement Objectives

IIA Practice Guide: Auditing the Management of Internal Controls

During engagement planning, an internal auditor uses a flowchart to evaluate the design of controls. A flowchart visually represents the processes and controls within the organization, helping the auditor identify control points, weaknesses, and potential risks. This understanding is critical for planning the audit, as it allows the auditor to design tests that effectively assess whether the controls are properly designed and implemented to mitigate risks.References:

Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2210 – Engagement Objectives.

According to IIA guidance, the chief audit executive (CAE) should maintain independence and objectivity in their role. While the CAE can manage and coordinate risk management processes, audit those processes, and be involved in risk oversight committees, they should not accept management's responsibility for risk management without the board's approval. This ensures that there is no conflict of interest and maintains the CAE's independence. References:

IIA Standards - 1110: Organizational Independence

IIA Practice Advisory - 2060-1: Reporting to Senior Management and the Board

When establishing the objectives of an assurance engagement, it is crucial for internal auditors to align the engagement objectives with the concerns and priorities of operational management. By meeting with operational management, the internal auditor can gain insights into any specific areas of concern, operational challenges, and potential risks. This collaborative approach ensures that the engagement objectives are relevant and focused on areas that provide the most value to the organization, facilitating a more effective and targeted audit process.References:

The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard 2201 - Planning Considerations