CIA IIA-CIA-Part2 Passing Score

Workpaper quality issues are a systemic problem that requires improvement of policies, procedures, and guidelines. Per Standard 2330 and 1311 (Internal Assessments), the CAE must establish processes to ensure quality documentation. Deletion (A) is inappropriate. A task force (B) does not address root cause. Option D neglects the systemic issue. The best corrective action is developing and implementing clear guidelines and procedures (Option C).

A. A plan that focuses on furthering the independence of the internal audit activity:While independence is essential, it is not directly related to professional development planning, which addresses skill enhancement.

B. A plan that ensures internal auditors collectively possess expertise in various fields to avoid outsourcing:This may be a benefit of professional development but is not its primary objective.

C. A plan based on individual preferences and proposals, which helps internal auditors achieve greater success:This option emphasizes individual goals rather than aligning professional development with organizational needs.

D. A plan that focuses on filling gaps in the current skills needed to complete audit objectives:Correct. Professional development should address skill gaps to enhance the internal audit activity’s ability to meet its objectives effectively.

CIA Exam Syllabus Reference:

Domain IV: Managing the Internal Audit Function – Professional Development and Resource Management.

When the rate of deviations discovered in the sample equals the tolerable deviation rate, it means that the control is functioning at the level deemed acceptable by the auditor's predefined criteria. This does not necessarily imply that the control is flawless, but rather that its effectiveness meets the minimum standards set by the audit plan. Therefore, the internal auditor can conclude that the control is acceptably effective, but should also note the potential need for improvement.

The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard 2320 - Analysis and Evaluation

COSO Framework - Control Activities

A. The policy for granting, modifying, and deleting user access:Correct. Understanding the policy ensures the auditor knows the framework and controls in place.

B. A sample of change request forms:Useful for testing but not as foundational as reviewing the policy.

C. User access reports reviewed by management:This evaluates monitoring but does not establish a baseline understanding of controls.

D. A current listing of system users and employees:Important for reconciliation but secondary to understanding the control framework.

CIA Exam Syllabus Reference:

Domain V: Performing Internal Audit Services – Preliminary Surveys.