IIA Updated IIA-CIA-Part1 Exam Questions and Answers by bruce

Risk analysis involves assessing both the impact and likelihood of risks, and these should be assessed together. This combined assessment helps in understanding the full scope of potential risks and is crucial for effective risk management and prioritization.

IIA guidance and risk management frameworks like COSO and ISO 31000.QUESTION NO: 459

According to IIA guidance, which of the following statements is true with regard to the chief audit executive's (CAE's) responsibility for conducting a self-assessment of the internal audit activity?

1 The CAE should select an independent reviewer or review team to perform sufficient tests of the self-assessment to validate the results

2 The CAE should validate results by engaging experienced audit professionals from a separate internal audit activity outside of the organization to reperform all of the tests conducted for the assessment

3. The CAE should select independent, nonaudit professionals who are knowledgeable about the organization and the industry in which it operates to assist with performing the self-assessment

4. The CAE may consider performing a self-assessment with independent external validation in Iieu of performing a full external assessment

A. 1 and 2 only.

B. 1 and 4 only

C. 1, 2, and 3

D. 3 and 4

Answer: B

According to IIA guidance, the chief audit executive (CAE) may consider performing a self-assessment with independent external validation in lieu of performing a full external assessment. This is known as a self-assessment with independent validation (SAIV) and is acceptable as a part of the internal audit activity’s quality assurance and improvement program. Choosing an independent reviewer or review team to perform sufficient tests of the self-assessment to validate the results is also aligned with IIA standards for maintaining quality within the internal audit function.References: IIA Standard 1300: Quality Assurance and Improvement Program, which outlines requirements for ongoing and periodic reviews of the internal audit activity.

To ensure that due professional care is applied, the chief audit executive should establish policies and procedures concerning the engagement process. This action sets a clear framework and standards for conducting audits, which guides auditors in meeting the necessary quality and ethical requirements. Establishing these policies is fundamental to ensuring that all engagements are performed with diligence and in accordance with professional standards.

IIA Standard 1300 - Quality Assurance and Improvement Program

If the assignment is a consulting engagement, the best action for the new internal auditor, who recently transferred from being an accounts payable clerk, is to decline the assignment and ask to be reassigned. This avoids any conflict of interest and maintains objectivity, as the auditor would be evaluating processes for which they were previously responsible, potentially compromising the independence and objectivity required in consulting engagements.

IIA Standards 1120 - Objectivity

In the accounts payable function, the most likely fraud scenario involves the creation of fictitious vendors. This fraud can lead to improper disbursements where payments are made to non-existent entities, effectively siphoning money out of the organization. This type of fraud is easier to execute in accounts payable compared to other functions because it can involve relatively straightforward manipulations of vendor master files and payment processes. Such schemes can result in significant financial losses and are a common concern for internal auditors reviewing accounts payable controls.

IIA Practice Guide on Accounts Payable Risks and Controls.

Association of Certified Fraud Examiners (ACFE) publications on common fraud schemes.