IIA-CIA-Part2 Reviews Questions

One of the primary drawbacks of using internal control questionnaires is the risk that management may not provide honest or accurate answers. This can occur due to a variety of reasons, including a lack of knowledge, intentional deception, or a misunderstanding of the questions. As a result, the responses may not accurately reflect the true state of the controls, leading to incomplete or misleading audit conclusions.

References:

The Institute of Internal Auditors (IIA) Practice Guide: Assessing the Adequacy of Risk Management Using ISO 31000

IIA Standard 2310 - Identifying Information

A compliance assurance engagement focuses on evaluating whether an organization is adhering to applicable laws, regulations, policies, and procedures. Assessing the design adequacy of controls related to consumer privacy and confidentiality is a prime example of such an engagement, as it ensures that the organization’s controls are designed to comply with relevant privacy laws and regulations, thereby protecting consumer data and maintaining compliance.References:

The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard 2410 - Criteria for Communicating

Trend analysis is the analytics procedure that an internal auditor would use to compare performance information from one quarter to another. This technique involves analyzing data over a specific period to identify patterns, trends, and changes in performance metrics. Trend analysis helps auditors understand the direction of key performance indicators and assess whether performance is improving, declining, or remaining stable.

References:

The Institute of Internal Auditors (IIA) Standards

Data Analytics Techniques in Internal Auditing

The most appropriate action to assess compliance with the organization's standard operating procedures for bank deposits during a preliminary survey is to issue an internal control questionnaire to select branch managers. Branch managers are directly responsible for the day-to-day operations at their branches, including adherence to standard operating procedures for bank deposits. They are in the best position to provide accurate and relevant information about the controls in place and their effectiveness.

IIA References:

IIA Standard 2210: Engagement Objectives and IIA Standard 2201: Planning Considerations emphasize the importance of gathering relevant information from knowledgeable sources during the planning phase of an engagement. Issuing ICQs to individuals who oversee the processes under review, such as branch managers, helps in identifying potential risks and areas of non-compliance.