IIA IIA-CIA-Part2 Actual Questions

According to IIA guidance, the chief audit executive (CAE) is directly responsible for establishing the objectives, scope, and plan for each engagement. This responsibility ensures that each audit is properly focused and aligned with the overall goals and risk areas of the organization. While maintaining a quality assurance program and providing professional development opportunities are important, they are not solely the CAE ' s responsibility without management support. Periodic review and approval of the internal audit charter is typically a joint responsibility with senior management and the board. References:

The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2010 - Planning.

The IIA’s Practice Guide on Developing the Internal Audit Plan.

Judgmental sampling, also known as non-statistical sampling, is a technique where the internal auditor uses their professional judgment to select a sample that they believe is most representative of the population. In this scenario, the internal auditors are choosing to review a sample of complaints from the last three months based on their professional judgment that these complaints are reflective of current marketing practices. This method is particularly useful when the auditor has specific knowledge about the population that allows them to make informed selections.

Institute of Internal Auditors (IIA) Standards: Performance Standards 2320: Analysis and Evaluation

Internal Audit Manual: Sampling Techniques and Methodologies

When an internal auditor is unable to find supporting documentation for selected accounts during a test, the appropriate next step is to contact management to determine if the documentation is stored elsewhere. This ensures that all potential sources of evidence are explored before drawing any conclusions.

IIA Standard 2310 – Identifying Information:

This standard requires auditors to obtain sufficient, reliable, relevant, and useful information to support their findings. If documentation is missing, the auditor must investigate further to determine if the evidence exists in another location or form.

Contacting Management:

Before concluding that the test failed or expanding the sample, the auditor should first check with management to see if the documentation might be stored in an alternative location. This step ensures that the audit results are based on a thorough and complete examination of available evidence.

IIA Practice Advisory 2330.A1-1:

The advisory suggests that auditors should consider all sources of evidence and confirm with management if there are any alternative ways to obtain the necessary information.

Option A (Conclude that the test failed): This conclusion would be premature without first attempting to locate the missing documentation.

Option B (Select new accounts): This could lead to the same issue if the documentation is not missing but simply stored elsewhere.

Option C (Expand the sample size): Expanding the sample is unnecessary if the issue is simply that the documentation is stored in a different place.

Detailed Explanation:Why Not Other Options?Conclusion: Option D is correct because it involves taking the logical next step of contacting management to locate the missing documentation, ensuring that the audit is thorough and the conclusions drawn are based on all available evidence, in line with IIA standards.

A flowchart is primarily used to evaluate the design of controls by visually representing the sequence of operations, decision points, and control activities within a process. This helps the internal auditor identify weaknesses, redundancies, and gaps in internal controls.

Preparing for testing the effectiveness of controls (A) comes later in the audit process, after evaluating the design.

Planning for evaluating potential losses (B) focuses on risk assessment rather than control design.

Preparing a sampling plan (C) is a different step in the audit process, where the auditor determines the scope and sample size.