IIA Updated IIA-CIA-Part1 Exam Questions and Answers by adeline

The internal audit charter formally establishes the internal audit function’s purpose, authority, responsibilities, organizational position, and relationship with the board and senior management. It helps these stakeholders understand how internal audit supports organizational objectives and operates consistently with applicable professional principles. An audit risk assessment is primarily used to identify and prioritize risks for audit planning. An audit program specifies procedures for accomplishing a particular engagement, while audit objectives describe what an individual engagement is intended to achieve. Neither provides the same organization-wide understanding of internal audit’s mandate. By defining internal audit’s role and expected services, the charter aligns the function with organizational goals and provides the board and senior management with a clear basis for oversight and accountability. Therefore, the audit charter is the best answer.

Individuals working in separate internal audit activities can be considered independent for the purpose of conducting a peer review, provided they do not report to the same chief audit executive (CAE). This separation helps to ensure that the reviewers do not have a conflict of interest or undue influence from shared reporting lines, thus maintaining the integrity of the external quality assessment process.

IIA Standard 1312 - External Assessments

Intentionally leaving out material observations from the audit report clearly indicates a compromise in the independence of the internal audit. Independence is fundamental to the credibility of the audit function, and any actions that suggest altering audit reports to omit significant findings undermine this principle. Such behavior may suggest an effort to avoid conflict or negative reactions from management, directly impacting the objectivity and integrity of the audit results.

Institute of Internal Auditors (IIA) - International Professional Practices Framework (IPPF)

Due professional care was applied by the internal auditor. According to IIA guidance, due professional care involves applying reasonable judgment in all audit circumstances. The auditor’s decision to extend the scope of testing based on a fraud risk assessment, even though no issues were initially found, represents a judicious use of professional judgment given the potential risk of fraud. The fact that fraud was later discovered does not necessarily imply a lack of professional care, as audits cannot guarantee the detection of all frauds.

IIA Standard 1220 - Due Professional Care