All IIA-CIA-Part2 Test Inside IIA Questions

The efficiency of an audit is greatly influenced by the adequacy of preliminary survey information. Thorough preliminary surveys help auditors understand the audit scope, identify potential issues early, and plan their work efficiently, thereby increasing overall audit efficiency. References: = IIA Practice Guide: “Engagement Planning: Establishing Objectives and Scope” and IIA Standard 2201 - Planning Considerations.

The most appropriate action to assess compliance with the organization's standard operating procedures for bank deposits during a preliminary survey is to issue an internal control questionnaire to select branch managers. Branch managers are directly responsible for the day-to-day operations at their branches, including adherence to standard operating procedures for bank deposits. They are in the best position to provide accurate and relevant information about the controls in place and their effectiveness.

IIA References:

IIA Standard 2210: Engagement Objectives and IIA Standard 2201: Planning Considerations emphasize the importance of gathering relevant information from knowledgeable sources during the planning phase of an engagement. Issuing ICQs to individuals who oversee the processes under review, such as branch managers, helps in identifying potential risks and areas of non-compliance.

Management’s action to recoup the duplicate payments made to a vendor is an effect-based action plan because it directly addresses the outcome (the duplicate payment) rather than the underlying cause that allowed the error to occur. An effect-based action plan focuses on correcting the issue's immediate consequences but does not necessarily address the root cause that led to the issue in the first place.

IIA References:

IIA Standard 2500: Monitoring Progress emphasizes that internal auditors should monitor the disposition of audit recommendations. Addressing only the effects of an issue, like in this case, might provide a temporary fix but does not prevent future occurrences if the underlying causes are not identified and corrected.

The CIA Exam (Part 2 – Practice of Internal Auditing) requires auditors to identify the root causes of issues and deviations from criteria, not just report symptoms. A root cause analysis seeks the underlying reason for a problem, rather than describing its occurrence.

Option A simply describes the condition (missing results).

Option B identifies a trend but not the underlying cause.

Option D shifts responsibility to employees without addressing why results were not saved.

Option C identifies a system design flaw that prevents employees from saving results, which is a true root cause.

Therefore, including Option C in the audit report demonstrates compliance with internal audit methodology, as it highlights the underlying systemic problem instead of merely documenting symptoms or assigning blame.