IIA Updated IIA-CIA-Part1 Exam Questions and Answers by ryder

Requiring management approval for expenses is an effective control to prevent inappropriate use of organizational funds and falsification of financial records. This control ensures that all expenditures are reviewed and approved by a higher authority, providing a check against potential misuse of funds. It helps in verifying the legitimacy and necessity of expenses, thereby reducing the risk of fraudulent activities by employees.

The Institute of Internal Auditors (IIA) Standards and Practice Advisories.

COSO Internal Control – Integrated Framework.

"Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on Expense Management and Approval Controls.

The most effective way a chief audit executive (CAE) can demonstrate to the board that the internal audit team has the necessary skills to achieve its annual goals is through a competency assessment. This assessment measures and documents the collective skills and knowledge within the internal audit activity, ensuring they align with the requirements of the audit plan and the organization's objectives. Competency assessments can identify gaps and provide a basis for training and development, making it an essential tool for demonstrating capability.

The Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

The most appropriate first step for the board to take when developing an effective system of governance is to identify key stakeholders and their expectations. Understanding stakeholders' expectations is fundamental to defining the governance framework that aligns with these needs and establishing the organization's strategic objectives and policies.

IIA guidance on effective governance frameworks.

In situations where proper segregation of duties is not achievable due to insufficient staffing, internal auditors recommend the implementation of compensating controls. Compensating controls are additional procedures or safeguards designed to reduce the risk associated with insufficient segregation of duties. These controls do not prevent errors or fraud from occurring but aim to detect them in a timely manner if they do occur.

For instance, in a small manufacturer where the accounting department cannot separate tasks adequately due to limited staff, the auditor might suggest:

Enhanced supervisory reviews: Managers or supervisors closely review and approve transactions and reconciliations performed by the staff.

Periodic independent reviews: Regular audits or reviews by internal auditors or third-party auditors to ensure transactions are proper and in compliance with company policies.

Use of technology: Implementing automated controls that require multiple approvals for significant transactions.

Rotation of duties: Regularly rotating employees' responsibilities to prevent familiarity and collusion.

These measures help mitigate the risks that arise from the lack of segregation of duties, providing reasonable assurance that financial records are accurate and that fraud or errors are detected promptly.

The Institute of Internal Auditors (IIA) Standards and Practice Advisories.

COSO Internal Control – Integrated Framework.

"Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on Control Activities and Segregation of Duties.