IIA Updated IIA-CHAL-QISA Exam Questions and Answers by richard

Preliminary Communication:Preliminary communication to management of the area under review is essential in setting clear expectations and ensuring transparency regarding the upcoming audit.

Key Elements to Include:

Scope of the Engagement:Define what will be covered in the audit to ensure that management understands the focus areas and objectives.

Estimated Time Frame:Provide a timeline for the audit activities, including the start and end dates, to help management plan and allocate resources accordingly.

Names of the Auditors:Identify the auditors involved to facilitate communication and coordination with the audit team.

IIA Guidance:According to the IIA standards, communicating these elements helps in building a cooperative relationship and ensures that there are no misunderstandings regarding the audit process.

References:

IIA Standard 2201 – Planning Considerations .

Understanding the GRI:The Global Reporting Initiative (GRI) provides a comprehensive framework for reporting on sustainability performance, including social responsibility aspects.

Framework and Standards:GRI standards are widely used and recognized globally, which helps organizations benchmark their performance against other entities using the same framework.

Stakeholder Communication:The GRI framework emphasizes transparency and accountability in reporting, making it an effective tool for informing stakeholders about an organization's social responsibility performance.

Comprehensive Coverage:GRI covers various aspects of social responsibility, including economic, environmental, and social impacts, providing a holistic view of an organization's performance.

References:

The Global Reporting Initiative (GRI) .

Identifying the Anomaly:The internal auditor has identified a discrepancy in the travel expenses of the department head, who frequently travels yet reports minimal expenses. This raises a red flag that needs further investigation.

Understanding the Context:It is important to determine if there are legitimate reasons for the discrepancy, such as special arrangements made for senior management travel, which could explain the absence of typical travel expenses like hotels, meals, and transportation.

Appropriate Next Step:Investigating whether there are any special arrangements for senior management travel (Option C) is the most logical next step. This helps in understanding the context and validating whether the discrepancy is justified or indicative of potential issues such as fraud or misreporting.

Role of CAE as Consultant: The chief audit executive (CAE) can act as a consultant to help management establish a risk management system. Their role should be facilitative rather than directive, ensuring that management owns the risk management process.

Appropriate Tasks:

Risk Workshops: Coordinating and facilitating risk workshops (option A) helps management identify and assess risks, allowing them to develop appropriate responses. This is a suitable task for the CAE.

Risk Appetite and Indicators: Establishing risk appetite (option B) and setting risk indicators and mitigation plans (option C) are management's responsibilities.

Reporting Risks: Determining the number of significant risks to report (option D) should also be a management function.