Pass IIA-CIA-Part1 Exam Guide

According to IIA guidance, due professional care means that internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor. This involves considering the cost of assurance in relation to potential benefits and exercising judgment and care in accordance with the complexity of the task. It does not imply an exhaustive review of all transactions or guarantees that all significant risks will be identified or that fraud does not exist.

The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing, specifically those related to due professional care.

Requiring contractors to submit completed and signed work acceptance sheets is an effective control to mitigate the risk of fraudulent invoices. This control provides direct evidence that the work was completed as agreed, and it offers a verifiable document that can be checked against invoices submitted. This step also ensures that any claims made by contractors can be cross-referenced easily, enhancing transparency and accountability in the billing process.

Best practices in contractor management and invoice verification.

Internal audit activities are expected to contribute to the improvement of the organization ' s governance processes. To effectively fulfill this role, internal auditors must work with the board to agree on the scope of their governance assessments. This includes defining the range of activities to be reviewed, the depth of these reviews, and the time period covered. Achieving this agreement ensures that the internal audit ' s evaluation aligns with the board ' s expectations and the organization ' s strategic objectives, thereby enhancing the overall governance framework.

IIA Standard 2110: Governance

IIA Practice Guide: Assessing Organizational Governance

In responding to a request from senior management for the internal audit activity to review and amend policies when auditing the purchasing department, the chief audit executive would most likely give primary consideration to maintaining internal audit independence. This request potentially places the internal audit activity into a management role, which could impair its independence and the ability to perform unbiased audits in the future. According to IIA standards, internal auditors should avoid taking on operational responsibilities to preserve their independence.

IIA Standards on independence and objectivity.