IIA Updated IIA-CIA-Part1 Exam Questions and Answers by helen

Control activities are indeed carried out by first-line (operational management) and second-line (risk management and compliance functions) to mitigate risks. These activities are key components of an organization's internal control system, designed to address and manage risks identified across the organization. Internal auditors do not implement control activities; instead, they assess the adequacy and effectiveness of these controls.

COSO Framework on Internal Control and IIA guidance on control activities.

After a potential fraud instance is identified and a lead investigator is appointed, the most likely next step is to determine the competencies needed for the investigation team and assess whether any team members have a conflict of interest. This step ensures that the investigation is conducted by appropriately skilled and unbiased personnel, which is crucial for maintaining the integrity and effectiveness of the investigation process.

Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF), Practice Guide: Assessing Fraud Risks

A chief audit executive failing to perform a risk assessment prior to preparing the audit plan demonstrates nonconformance with the Standards. According to IIA standards, specifically Standard 2010 – Planning, a risk assessment must inform the audit plan, ensuring that resources are appropriately directed towards areas of higher risk. References: IIA Standard 2010: Planning, which mandates the requirement for risk assessments in audit planning.

The chief audit executive (CAE) should decline the request to perform a review of suspicious transactions if it is a consulting engagement, particularly because she recently worked in the organization's accounting department. The close temporal proximity (six months ago) between her managerial role in the department and the present could impair her objectivity and independence in evaluating the transactions.

Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF), Code of Ethics