IIA Updated IIA-CIA-Part2 Exam Questions and Answers by georgiana

The primary reason for an internal auditor to use a risk and control questionnaire when auditing financial processes is to gain an understanding of the control environment. These questionnaires help auditors identify and evaluate the presence and effectiveness of controls within the financial processes. They provide a structured way to gather information about the control environment, helping auditors understand the organization's risk management and control practices before conducting detailed testing.

References:

IIA Standards: 2201 - Planning Considerations

IIA Practice Guide: Internal Auditing and Fraud

The observation in question includes the condition ("no approved credit risk management policy" and "17 out of 50 contacts showed clients with a poor credit history") and the cause (the subsidiary concluding contacts with high-risk clients). However, it lacks the effect, which should explain the potential or actual impact of this deficiency on the organization (e.g., financial losses, increased credit risk). Additionally, it is missing the criteria, which should reference the specific rules or policies that are not being followed (e.g., the organization’s credit risk management policy requirements). Including these components would provide a complete and actionable observation.References:

The Institute of Internal Auditors (IIA) - Practice Guide: Audit Reports and Working Papers

For a consulting engagement, planning typically occurs after the engagement objectives and scope have already been determined. In consulting engagements, the objectives and scope are usually agreed upon with the client at the outset, and planning activities then focus on how to achieve these objectives within the defined scope.

References:

IIA Standards: 2010 - Planning

IIA Practice Guide: Consulting Services

Establishing credibility, trust, and rapport is critical to the success of an effective interview. When interviewees trust the auditor and feel comfortable, they are more likely to provide honest and useful information. Building rapport also helps in reducing resistance and ensuring a smooth flow of communication during the interview.

IIA References:

IIA Standard 2420: Quality of Communications emphasizes the importance of clear, accurate, and constructive communication. Establishing trust and rapport during interviews contributes to the quality of information gathered, which in turn enhances the overall quality of audit communications.

The Practice Guide on Effective Interviewing Techniques discusses the importance of building rapport and trust to encourage openness and candidness from interviewees.