After completing an operational audit of efficiency at a major distribution center, the internal auditor is preparing to communicate the results. According to the Global Internal Audit Standards, which of the following elements must be included in the final communication of engagement results?

Objectives, scope, and conclusions at a minimum

Recommendations only if requested by auditee management

Objectives, scope, and conclusions at a minimum

Only positive findings that highlight operational improvements

Only control weaknesses that present significant financial risk

The internal audit team has completed an extensive engagement reviewing inventory controls at a large manufacturing firm and is now drafting the final report. The Chief Audit Executive (CAE) is considering including an overall opinion. Which of the following statements correctly describes the requirements for providing an overall opinion?

It may be provided if it is supported by sufficient, reliable, relevant, and useful information.

It is always required in the final report to comply with the Global Internal Audit Standards.

It can only be a positive assertion if no material control weaknesses were identified.

It may be provided if it is supported by sufficient, reliable, relevant, and useful information.

It should be avoided, as it may impair the internal audit activity's independence and objectivity.

During the planning phase of an audit of a manufacturing plant, the internal auditor identifies a specific risk: a catastrophic equipment failure in a highly specialized, custom-built machine. The analysis shows the financial impact would be severe, but historical data indicates the likelihood of such a failure is very low. The internal auditor is tasked with evaluating management's proposed risk response. Which of the following responses would the auditor most likely assess as appropriate for this risk profile?

Sharing the risk by purchasing specialized business interruption and equipment insurance.

Avoiding the risk by decommissioning the specialized machine and outsourcing that stage of production.

Accepting the risk and establishing a contingency fund to cover potential losses from production downtime.

Controlling the risk by implementing a redundant, fully parallel production line as a backup.

Sharing the risk by purchasing specialized business interruption and equipment insurance.

An internal auditor is conducting an engagement to evaluate the effectiveness of a company's expense reimbursement process. The engagement objective is to determine if all submitted expenses are for legitimate business purposes and are compliant with company policy. Which of the following pieces of evidence would be considered the most relevant to this specific objective?

A sample of approved expense reports, including attached receipts, which are then compared against the company's travel and entertainment policy.

A summary report showing the total volume of expense reports processed by the accounts payable department each month.

Testimonial evidence from the Chief Financial Officer stating that the controls over expense reporting are well-designed.

A selection of employee performance reviews that include comments on their general adherence to company policies.

An internal auditor is planning an engagement to test the operating effectiveness of a control over 50,000 purchase orders. To ensure the sample results can be statistically projected to the entire population, which of the following sampling methods must the auditor use?

Random sampling, where every purchase order has an equal chance of being selected.

Judgmental sampling, focusing on high-value purchase orders.

Random sampling, where every purchase order has an equal chance of being selected.

Haphazard sampling, selecting items without any conscious bias.

Block sampling, selecting all purchase orders processed in the month of June.

When planning an assurance engagement for a new customer onboarding process, the internal audit activity must establish clear objectives. According to the Global Internal Audit Standards, these engagement objectives must be primarily based on:

The results of a preliminary assessment of risks relevant to the process.

Management's stated objectives for the customer onboarding process.

The findings and recommendations from the prior year's audit cycle.

The results of a preliminary assessment of risks relevant to the process.

The constraints of the internal audit activity's available budget and staffing.

During the preliminary survey for an audit of a company's procurement process, the internal auditor is gathering initial information. Which of the following activities is NOT an appropriate objective of this phase?

Formulating and finalizing the engagement conclusions and overall opinion.

Developing an understanding of the business process being audited.

Reviewing prior internal and external audit reports related to procurement.

Identifying the key control objectives for the procurement cycle.

Formulating and finalizing the engagement conclusions and overall opinion.

During a fraud investigation at a large corporation, the internal audit team is gathering various pieces of information to support its findings. To ensure the engagement's conclusions are credible and defensible, the information gathered must be:

Sufficient, reliable, relevant, and useful.

Primarily testimonial to establish direct intent.

Sufficient, reliable, relevant, and useful.

Exclusively quantitative for objective verification.

Directly from management to ensure operational context.

In planning an engagement to audit a company's revenue recognition process, which factor most directly determines the sample size of transactions selected for detailed testing?

The acceptable level of sampling risk.

The number of internal auditors assigned to the engagement.

The total time budgeted for the engagement.

The sample size used in the prior year's audit.

The acceptable level of sampling risk.

Free IIA CIA Part 2 (Practice of Internal Auditing)

Select Exam:

Choose Section:

IIA CIA Part 2 (Practice of Internal Auditing) 10-Question Diagnostic

~10 minutes· Question 1 of 10· 12-Week Plan PDF

CIA2-ATopic: Engagement planning

During the planning phase of an audit engagement, the internal auditor is tasked with developing the work program. According to the Global Internal Audit Standards, which of the following must be included in an engagement work program?