Internal Audit Fundamentals
Last Update Jul 26, 2026
Total Questions : 735
We are offering FREE IIA-CIA-Part1 IIA exam questions. All you do is to just go and sign up. Give your details, prepare IIA-CIA-Part1 free exam questions and then go for complete pool of Internal Audit Fundamentals test questions that will help you more.
In its five years of existence, an internal audit activity conducted a single internal assessment of its quality assurance and improvement program (QAIP). The results of that assessment showed that the internal audit activity did not conform with the Standards. Prior to this, an external assessment of the internal audit activity ' s QAIP was conducted, which reported that the internal audit activity was in conformance with the Standards. Considering the two assessments, what would be the internal audit activity ' s current state of conformance with the Standards?
Which of the following scenarios is a characterize of an organization with a highly effective ethical culture?
An internal audit activity is using the auditing-by-element approach to audit the organization ' s controls around corporate social responsibility. Which of the following would be an element for the internal audit activity to consider?
Which of the following situations would cause the greatest concern regarding impairment of internal audit objectivity?
Which of the following would be considered an indicator that an organization ' s ethics program is not yet well developed?
Which of the following scenarios provides the most concerning red flag or indicator of possible fraud?
An experienced internal auditor is planning an assurance engagement of the organization ' s sales activities. During process walkthroughs and interviews, many sales representatives expressed concerns about management ' s escalating demands to meet the organization ' s sales goals. According to the MA guidance, which of the following is the best application of due professional care in planning the engagement?
Which of the following is a control that is used mainly to check the integrity of data entered into a business application, whether the data is entered directly by staff, remotely by a business partner, or through a web-enabled application?
The chief audit executive (CAE) annually develops a budget and resource plan and submits it to the board for approval. This action best fulfills which of the following responsibilities of the CAE?
When an organization purchases a derivative contract in the stock market to limit the potential loss in the value of a security, the organization is applying which of the following risk management techniques?
In which of the following audits would the internal auditors most likely contribute to the assessment of organizational governance?
According to MA guidance, which of the following gives the internal audit activity the authority to request supporting documentation for the invoices of a third-party service provider?
Evidence discovered during the course of an engagement suggests that multiple incidents of fraud have occurred. There do not appear to be sufficient controls in place to prevent reoccurrence. Which of the following is the internal auditor ' s most appropriate next step?
A large commercial bank was fined by regulators for fraudulent practices when employees, over a period of time, opened thousands of new accounts for existing clients without the clients ' consent. It was later found that employees were given unrealistic new account targets and were aggressively monitored by management on a daily basis.
Which of the following controls would have most likely reduced the likelihood of the fraudulent practice from occurring?
Which of the following is the best reason why the engagement supervisor should take care in explaining to local management the criteria that will be used to measure the effectiveness of the control environment?
An internal audit of warehouse inventory revealed no material deficiencies. However, management later discovered fraud, which occurred during the period that was audited, and determined that a major control deficiency allowed the fraud to occur. Given management ' s discovery, which of the following statements is valid?
Which of the following best demonstrates internal auditors performing their work with proficiency?
Which of the following is (he most effective way any organization can ensure proper governance over its internal controls?
Which of the following is most likely to be considered a control weakness?
Which of the following is the best example of a risk appetite statement concerning an investment portfolio?
An internal auditor performed a consulting engagement last year which included assisting with management ' s design of controls over the procurement function. How should the chief audit executive plan an assurance engagement on the adequacy of the internal control system in the procurement function in the current year?
An external assessment of an organization ' s internal audit activity was last completed four years ago Which of the following options would be acceptable this year if the internal audit activity is to fulfill the requirements of the Standards?
According to IIA guidance which of the following statements regarding ethics is true?
Which of the following should the internal audit activity establish to ensure auditors develop the appropriate skills for conducting audits?
Which of the following statements is the most appropriate for a chief audit executive to include in the internal audit policy manual in order to promote objectivity?
An internal auditor at a multinational organization is reviewing the effectiveness of the organization ' s risk management framework. In this scenario, which of the following statements is true?
An organization is testing a new IT system for digital data storage and security. The internal audit activity has been asked to evaluate the system in a consulting engagement. Although several internal auditors on staff are qualified to perform basic assessments of IT systems, none are familiar with the new system. Which of the following is a legitimate response to the prospective client?
1. Decline the engagement.
2. Proceed with the engagement, performing only those parts of the engagement that the internal auditors are qualified to perform.
3. Accept the engagement and develop the additional competencies in-house prior to the engagement ' s starting date.
4. Make arrangements to obtain assistance from a competent IT auditing expert.
Which of the following would be the most effective in helping to detect fraud?
A new internal audit activity is considering the adoption of a risk and control framework. Which of the following is the most appropriate consideration during this process?
The internal audit activity was denied access to expenditure and budget reports because they were considered to be confidential. This situation would result in which of the following limitations of the internal audit activity?
Which of the following are some of the requirements of the quality assurance and improvement program (QAIP)?
A chief audit executive (CAE) was asked by senior management to establish and manage a risk management function. A new chief risk officer was hired a year later to assume these responsibilities. As this function was included in the current annual audit plan, the CAE engaged an external resource for a risk management engagement. Which of the following potential threats to objectivity was the CAE likely addressing?
Which of the following resources would be most effective for an organization that would like to improve how it informs stakeholders of its social responsibility performance?
An internal audit team received the following feedback from operational management via a post-engagement survey " Management agrees with all audit findings However, the audit team did not consider our input on the best way to resolve the issues”
This feedback is an indication that the internal audit activity may need to improve which of the following interpersonal skills?
According to IIA guidance which of the following correctly describes the standard risk treatments outlined in the process element approach of the framework for risk management?
When the chief audit executive Is responsible for risk management in an organization, which of the following parties is responsible for overseeing the internal audit activity ' s assurance over risk management?
Which of the following scenarios would cause a chief audit executive (CAE) to immediately discontinue using any statements that would indicate conformance with the Standards in an audit report?
Which of the following strategies would be the most effective to share an organization ' s risk of losses through foreign currency transactions related to the accounts payable process?
According to NA guidance, which of the following describes the primary reason to implement environmental and social safeguards within an organization?
Which of the following would most likely be classified as a consulting engagement?
According to IIA guidance, which of the following best describes the chief audit executive s responsibility for confirming to the board the organizational independence of the internal audit activity ' ?
To achieve conformance with the Standards, the chief audit executive must include which of the following activities in the quality assurance and improvement program (QAIP)?
During an audit of the purchasing department, an internal auditor identifies significant issues that could affect the organization ' s financial reporting. Management disagrees with the audit results. Which of the following responses best demonstrates the internal auditor has the necessary competencies related to professional Judgment and conflict management?
Which of the following statements is true regarding reporting results of the quality assurance and improvement program to senior management and the board?
An organization is considering purchasing a new banking software system and has asked the internal audit activity to evaluate the system. An internal auditor assigned to perform the engagement worked at the software company two years ago and is familiar with the system ' s design strengths and weaknesses. Which of the following is true regarding impairment to the auditor ' s objectivity?
Which of the following best demonstrates conformance with the Standards regarding the internal audit activity ' s purpose authority, and responsibility?
An organization allows the same individual to physically access inventory and purchase new assets when supplies are depleted. Which of the following would best help the organization manage the risk of fraud?
Which of the following activities best demonstrates an internal auditor’s commitment to developing professional competencies?
According to IIA guidance, which of the following statements is true regarding the internal audit activity’s responsibilities in providing consulting services?
Senior management asks the chief audit executive to review the organization ' s compliance with recently introduced legislation on international transfer pricing. The review requires an internal auditor who thoroughly understands the legislation and pricing methods. The internal audit activity does not have an auditor with those skills. Which of the following is the most appropriate course of action?
Which of the following would be considered a violation of The HAfs mandatory guidance on independence?
For a new board chair who has not previously served on the organization ' s board, which of the following steps should first be undertaken to ensure effective leadership to the board?
Which of the following practices is generally most effective to protect internal audit objectivity?
Which of the following approaches will internal audit utilize when developing a set of performance standards to measure an organization’s risk management process against?
Which of the following fraud prevention measures is most likely to trigger undesired adverse behavior if improperly designed?
The results of an assessment of the adequacy of controls would be considered incomplete or misleading unless the internal auditor considers which of the following?
An existing Internal audit charter is currently under review for revision. Who is responsible for assuring that all required components are included?
Which of the following best describes the risk created when a manager bypasses organizational policies and procedures in order to meet an organization’s objective?
To comply with the proficiency standard which of the following would the chief audit executive likely consider as the primary hiring criterion when choosing a new internal auditor?
An internal auditor wants to compare her organization’s governance processes to those of a well-known governance model. Which of the following approaches would the auditor take for this purpose?
A business unit manager was impressed by the competence of the internal auditor who was conducting an assurance engagement in his area and the manager made the auditor an attractive job offer to begin after the audit was completed The auditor later told her auditor in charge that she was considering the offer. Which of the following IIA Code of Ethics principles was most likely violated?
Which of the following statements best represents the due professional care that is required of internal auditors?
As a result of a high-profile processing error, respective business unit managers are implementing new controls. The internal audit team was asked for their advice regarding the controls. The objective of this consulting engagement would be determined by which of the following?
According to IIA guidance, which of the following is an appropriate role for the internal audit activity?
Which of the following should be part of the internal audit activity ' s duties?
Which of the following is the most appropriate way to ensure that a newly formed internal audit activity remains free from undue influence by management?
An internal auditor creates a professional development plan to obtain more experience in the organization ' s environmental, social, and corporate governance initiatives. Which of the following would the auditor include in the plan to support these objectives?
Which of the following is a way to demonstrate an individual internal auditor ' s competency through continuing professional development?
According to NA guidance which of the following should be documented in the internal audit chatter?
Which of the following would be the most effective fraud prevention control?
It is important for the chief audit executive to consider the level of competence of the internal audit staff because their competence influences which of the following?
An organization ' s board has approved an expansion plan into a new market. The board acknowledged that if the expansion is not successful, the organization would encounter large monetary losses consisting of legal fees, research and development costs, rent expenses, and labor fees. Which of the following has the board approved?
An IT contractor applied for an internal audit position at a bank. The contractor worked for the bank ' s IT security manager two years ago. If the audit manager interviewed the contractor and wants to extend a job offer, which of the following actions should the chief audit executive pursue?
Which of the following tools would be most useful to an internal auditor performing an assessment of the effectiveness of the organization ' s risk responses?
After the draft engagement report is issued, the manager of the area that was reviewed is informally interviewed by the engagement supervisor regarding the audit experience. Which of the following is most likely the purpose for this interview?
An internal audit team was assigned to review the organization’s information security protocol After fieldwork was completed an internal auditor identified an error in the review of security access The error could affect the overall results of the engagement Which of the following is the most appropriate course of action for the internal auditor?
Which of the following best demonstrates the board of directors ' governance over internal control?
According to IIA guidance, which of the following is required of an internal audit activity?
Which of the following statements represents the most appropriate correlation between an organization ' s risk maturity and the internal audit activity’s consulting role in risk management processes?
According to IIA guidance, which of the following statements is true regarding reporting the results of the quality assurance and improvement program?
Which of the following would be considered a primary control to reduce the risk associated with setting up duplicate vendors?
A whistle blower notified internal audit of a conflict of interest between an organization ' s employee and a major supplier. Which of the following steps should be undertaken first?
Which of the following statements is true regarding the independent peer review process undertaken to fulfill the requirement for an external quality assessment?
Once an organization ' s risks are identified, what would be the next step to ensure resources are properly allocated to manage those risks?
An internal auditor is performing testing to gather evidence regarding an organization’s inventory account balance and is mindful of the possibility that the sample used might support the conclusion that the recorded account balance is not materially misstated when, in fact, it is. The auditor ' s concern best describes which of the following risks?
Which of the following principles of The IIA ' s Code of Ethics implies that internal auditors should refrain from performing assurance services when there is an impairment to audit independence that has not been declared?
Which of the following scenarios demonstrates nonconformance with the Standards?
An accounts payable clerk has recently transferred into the internal audit activity and has been assigned to an engagement related to accounts payable processes for which he was previously responsible. Which of the following is the best action for the new internal auditor to take?
Which of the following should be implemented to promote independence of the internal audit activity?
An internal auditor is providing consulting services on an area he was responsible for three years ago. Part of the consulting scope covers a review of a performance measuring system that the auditor helped to develop. What is the best course of action for the auditor to take concerning the consulting service?
A chief audit executive (CAE) recruited a few new internal auditors to reduce the resource gaps identified in this year ' s internal audit plan. One of the new recruits has several years of experience with the organization. Ten months ago. she served as a senior supervisor in the finance department. However, for the past 10 months, she has been helping the organization with implementing a new IT system. What approach should the CAE take for the upcoming financial statement controls audit?
Which of the following statements best describes a functional difference between external auditors and internal auditors?
Which of the following statements best describes internal auditors ' role in fraud detection?
What is the primary reason a chief audit executive should dedicate time and resources to support continuing professional development of internal audit staff?
Which of the following is a primary responsibility of senior management with respect to ethical violations?
Which of the following best describes the internal audit activity’s responsibility within a risk and control framework?
An organization allows the same individuals to physical access inventory and purchase new assets when supplies are depleted. Which of the following would best help the organization manage the risk of fraud?
What should be the first step for a newly hired chief audit executive to build and maintain the proficiency of the internal audit activity ' ?
According to the Standards, in today ' s technology and business environments, how much computer and information systems-related knowledge and skills must an internal auditor have to be effective in fulfilling his job responsibilities?
After being assigned to an audit of the accounts payable process, an internal auditor privately notifies the chief audit executive that she is a finalist for an open manager position within the accounts payable department. Which of the following is the IIA Code of Ethics principle that the auditor upheld?
According to IIA guidance, which of the following would be included in an internal audit charter to help establish the authority of the internal audit activity?
An internal auditor believes that a weakness exists in the control environment relating to the delegation of authority and responsibility within the management structure. Which of the following actions should the internal auditor first consider in this matter?
In a retail organization, sales teams compete with each other to achieve and exceed sales targets. Each quarter, the members of the top sales team receive a bonus. In this environment, management should closely monitor for the emergence of which of the following potential risks?
Which of the following indicates that internal audit independence may be compromised?
Which documents would help a forensic auditor identify instances of collusion between an employee and vendor to defraud the organization?
Which of the following best describes organizational governance processes?
During a review of employee benefits, a staff internal auditor observed an ambiguity in the incentive compensation policy. If reported, it could negatively impact the internal auditor ' s compensation. Which of the following would encourage the internal auditor to be objective in his work?
Which of the following statements about internal audit consulting engagements is true?
How should the internal audit activity promote continuous improvement of organizational controls?
According to IIA guidance, which of the following most appropriately justifies the CEO’s decision that the internal audit activity shall be responsible for risk management and investigation at a multinational organization?
In which of the following scenarios would the internal auditor’s objectivity be best protected?
An external assessment was performed as part of the organization ' s quality assurance and improvement program. Which of the following conclusions confirms that the internal audit activity is in conformance with the Standards ' ?
An internal auditor was completely honest with operational management when delivering unfavorable audit results. Which of the following best describes the IIA Code of Ethics principle that the auditor demonstrated?
Which of the following should an internal auditor take into consideration when making a judgement regarding whether management selected appropriate risk responses?
Which of the following would show appropriate disclosure of nonconformance with the Standards?
Which of the following would be considered a monitoring activity in organization wide risk management?
Which of the following statements demonstrates that internal auditors are in conformance with the standard of due professional care?
An internal auditor observed that sales staff are able to modify or cancel an order in the system prior to shipping* She wonders whether they can also modify orders after shipping. Which of the following types of controls should she examine?
A newly hired chief audit executive is reviewing available documentation to provide evidence of conformance with the standard for continuing professional development. Which of the following documents is the most reliable source for this purpose?
According to The IIA ' s Competency Framework, which competency is considered the mandatory minimum for internal auditors to possess when performing internal audit engagements?
An organization ' s operations management is aware of existing internal control deficiencies but they lack the competency to execute internal control measures. Which of the following actions if taken by the internal audit activity is appropriate to assist operating management in achieving continuous improvement on internal controls?
Which of the following requests, if accepted by the internal audit activity, would impair its independence?
An internal audit team analyzed the organization ' s value-at-risk model during an assurance engagement and suggested several useful improvements. Management was impressed by the internal audit team’s work and requested additional actions. Which of the following requested actions would impact internal audit independence most severely if fulfilled?
Which of the following is considered to be a threat to the internal auditor ' s objectivity?
A chief audit executive ensures that the internal audit activity provides annual training to management on internal controls. Where is the nature of these services defined?
During an audit of company expenses, the internal auditor performed a test using data analytics and identified a violation of the company ' s expenses policy. The auditor who discovered the issue considered it a potential fraudulent transaction and informed the chief financial officer (CFO). The CFO dismissed the concern because he did not understand the data analytics test that was performed and the transaction was of a low value. Given this situation, which skills or competencies should this internal auditor seek to improve?
Which of the following types of policies best helps promote objectivity in the interna! audit activity ' s work?
A chief audit executive (CAE) is considering hiring a candidate who most recently worked for a large public accounting firm What would be the CAE’s most likely concern regarding this candidate*?
An internal audit activity maintains a quality assurance and improvement program that includes annual self-assessments. The internal audit activity includes in each engagement report a clause that the engagement is conducted in conformance with the International! Standards for the Professional Practice of Internal Auditing (Standards). Which of the following justifies inclusion of this clause in the reports?
Which of the following accurately describes the concept of inherent risk?
Which of the following describes the primary objective when implementing a risk management framework?
Which of the following best demonstrates that an internal auditor is applying due professional care when planning an assurance engagement?
According to IIA guidance, which of the following actions best demonstrates that due professional care has been considered by the internal audit activity when conducting a review of an organization ' s assets?
Which of the following is a preventive control the organization could implement to mitigate fraudulent activity in the accounts payable department?
Which of the following best describes a consulting engagement rather than an assurance engagement?
According to IIA guidance, which of the following activities would typically be examined when using the maturity model approach for assessing an organization ' s risk management program?
The organization ' s chief audit executive (CAE) is planning an immediate assurance engagement following several product recalls. However, the internal audit staff does not have the required Knowledge and experience to adequately assess all the relevant processes and procedures. According to 11A guidance, which of the following actions should the CAE take under these circumstances?
According to IIA guidance, which of the following would the internal audit activity examine in order to evaluate the organization ' s governance process for strategic and operational decisions ' ?
An organization’s senior management team is awarding substantial bonuses if employees meet financial targets. Which of the following motivators to potentially commit fraud would become most likely in this scenario?
Which of the following written documents typically offers the best evidence that internal auditors exercise due professional care in conformance with the Standards?
The organization ' s internal audit charter was last updated six years ago. To update the charter, which of the following actions is most appropriate for the chief audit executive to take?
A technology company recently hired an entry-level internal auditor. To achieve conformance with the Standards, which of the following must the newly hired internal auditor possess?
According to IIA guidance, which of the following statements is true regarding the internal audit activity ' s quality assurance and improvement program (QAIP)?
Which of the following statements is true regarding the importance of risk management?
Which of the following is true regarding internal audit role ' s in The IIA ' s Three Lines Model?
An organization established 20 years ago has had its internal audit activity in place for the last three years. Which of the following would allow the internal audit activity to accurately state that it is in conformance with the Standards ' ?
Which of the following best describes a consulting engagement rather an assurance engagement?
Which of the following documents would promote objectivity within an organization ' s internal audit activity?
An internal auditor believes that the internal audit activity ' s independence is impaired. Which of the following actions should the internal auditor take first?
Which of the following describes the internal audit activity ' s most appropriate role in an organization ' s risk management process?
Recently an organization’s internal audit activity discovered ghost employees who receive payments Senior management decides to strengthen the internal control measures to address this Which of the following is considered an effective control to mitigate payments to ghost employees?
An investment advisory firm purchased professional liability insurance to offer protection from lawsuits brought by customers claiming they received poor or erroneous advice. Which of the following best describes this risk management technique?
Which of the following should play a leading role in overseeing the ethical atmosphere of an organization?
Which requirement should the chief audit executive consider when communicating results of the quality assurance and improvement program to the board of a large
organization?
The chief audit executive (CAE) is drafting the annual internal audit plan and seeks input from senior management and the external auditor prior to submitting it for approval to the board. According to MA guidance, which of the following statements is true regarding this scenario?
Which of the following documents are internal auditors most likely to be asked to sign as a demonstration of due professional care?
A description of their job responsibilities,
Which of the following situations undermines the independence of the internal audit activity?
During a review of the procurement function, an internal auditor identified an existing control for adding new vendors into the vendor contract system. Which of the following would best help the auditor determine the adequacy of the control ' s design?
During the planning stage of an assurance engagement, a payroll clerk informed the internal auditor that he is often asked to add new employees to the payroll without any formal new-hire documentation from human resources. The auditor is concerned that this increases the risk for fraud. To complete engagement planning, which of the following is the most appropriate next step for the auditor to take?
Which of the following would be the best choice for a continuing professional development requirement for a newly created internal audit activity?
Which of the following statements is true regarding an organization ' s code of ethics?
Management decided to post the organization ' s newly established code of conduct on its website. This decision is primarily intended to mitigate which of the following risks?
As part of a fraud investigation by regulators, a court order was issued to a bank. The court order requested the chief audit executive (CAE) to provide access to a number of audit reports and workpapers, some of which included customers ' confidential information such as transaction activity and other personal details. What is the appropriate response by the CAE?
What would be the proper sequence of steps for an internal auditor to take in order to draw a conclusion on internal control effectiveness and adequacy after ascertaining the key controls?
The principle that " no action should be taken that may harm in some way the least fortunate people " is an expression of which of the following more general ethical principles?
Which of the following would provide the best support for internal auditors to meet their continuing professional development requirements?
An engagement supervisor noted that an internal auditor ' s personal relationship with a process owner resulted in the auditor providing a favorable and partial assessment during an audit within that process owner ' s area. According to MA guidance, which of the following should be used to manage this impairment?
During an assurance engagement, an internal auditor identified that a developer of the organization ' s enterprise resource planning (ERP) system had intentionally modified the production code to commit a fraudulent transaction. Which control activity should be implemented to prevent such issues in the future?
According to IIA guidance, which of the following statements is true regarding the internal audit activity ' s quality assurance and improvement program (QAIP)?
During an assurance engagement, an internal auditor uses benchmarking research to support preparation of a report to stakeholders that contains significant findings about control deficiencies. Which of the following skills did the auditor demonstrate?
Which of the following strategies for professional development best demonstrates an internal auditor’s competency ' ?
Which of the following is a primary benefit of implementing a governance, risk management, and compliance framework within an organization?
Which of the following is true regarding the stakeholder theory of corporate social responsibility?
According to IIA guidance, which of the following is an appropriate role for the internal audit activity?
During a payroll audit, the internal auditor discovered that several individuals who have the same position classification as he are earning a significantly higher salary. The auditor noted the names and amounts of each, and he planned to prepare a request to the chief audit executive for a salary increase based on this information. Which of the following IIA Code of Ethics principles was violated in this scenario?
Which of the following corporate social responsibility strategies is associated with responding to outside pressure by assuming additional responsibility?
During a quality assessment of the internal audit activity an auditor is assessing whether the independence of the internal audit activity is at risk of being compromised. According to IIA guidance, which of the following would provide the best source of evidence for such an assessment?
Which of the following actions by the internal audit activity requires disclosure to the board of nonconformance with the Standards?
Which of the following best describes a purpose for the internal audit charter?
A whistleblower reveals to the chief audit executive (CAE) detailed allegations of potential fraud at the senior management level. Although the CAE has some experience in the area, she chooses to retain an external fraud expert to conduct the investigation. When asked by the director of finance to defend the expenditure, which of the following statements represents the CAE ' s best response?
What is the primary reason for establishing a continuing professional development program within an organization ' s internal audit activity?
Which of the following survey questions would be most effective to identify ethics violations within the organization?
Which of the following actions best demonstrates an internal auditor exercising due professional care?
Which of the following demonstrates that the internal audit activity exercises due professional care?
An internal auditor is assessing the effectiveness of the organization ' s risk management practices She checks to see whether risk management is an intégrai part of decision making and whether risk management is transparent, responsive to change and addresses uncertainty. According to HA guidance on risk management frameworks, which of the following approaches is the auditor most likely using?
Which of the following scenarios demonstrates an impairment to internal audit independence?
Which of the following engagements would be considered an appropriate consulting service?
An internal audit activity uses a rotational program to recruit high-performing staff members from other parts of the organization One of these individuals is nearing the end of her four-year internal audit rotation The chief audit executive assigned her to an assurance engagement in the business area she will be going into when she leaves the internal audit activity Which of the following statements is
true regarding this scenario?
Management of an area under review is aggressive, upset, and questioning the knowledge and experience of the organization ' s internal auditors, as the audit results highlight critical findings. The relationship between the internal audit activity and management has continued to degenerate. as previous audit reports also showed a large number of issues. What would be the best strategy for working through the current audit results while also attempting to repair the relationship with management?
Which of the following best demonstrates the application of due professional care?
According to IIA guidance, which of the following best demonstrates how the chief audit executive may ensure that due professional care is applied?
Which of the following situations is most likely to heighten an internal auditor ' s professional skepticism regarding potential fraud?
An organization has limited resources to spend on corporate social responsibility initiatives. Which is the most suitable approach to determine how these resources should be used?
In the context of an internal control framework, organizational structure and assignment of authority and responsibility is related to which of the following?
With regard to the internal audit activity ' s quality assurance and improvement program, which of the following topics would the chief audit executive include on the quarterly board meeting agenda?
Which of the following most accurately describes corporate social responsibility at an organization?
Which of the following is a greater consideration for internal auditors when they are performing a consulting engagement than when they are performing an assurance engagement ' ?
A chief audit executive (CAE) has just joined an organization with an existing internal audit activity. Based on her review of the current organizational structure, the CAE determines that the internal audit activity lacks adequate independence. Which of the following actions is the CAE ' s best step to take next to move the internal audit activity toward organizational independence?
According to IIA guidance, which of the following activities are considered a core internal audit role with regard to enterprise risk management?
Reviewing the management of key risks.
Evaluating the reporting of key risks.
Evaluating risk management processes.
Consolidating the reporting of risks.
According to the Standards, which of the following demonstrates the proficiency of an internal auditor?
An audit client who was unsatisfied with the audit report rating called the chief audit executive (CAE) and complained that the internal auditor who performed the audit was biased because his spouse, who worked in the area under review, was on a list of employees to be terminated. Which of the following measures would be most appropriate to prevent this situation from arising?
According to IIA guidance, which of the following activities would typically be examined when using the maturity model approach for assessing an organization ' s risk management program?
Which of the following is most likely to result in the impairment of independence for the internal audit activity?
Which of the following scenarios best demonstrates the application of internal audit proficiency?
Guidelines need to be set for various levels of suspected fraud within an organization and when it would be reported to the audit committee. Which of the following would be
reported at the next meeting?
A chief audit executive (CAE) has no direct access to the board. According to IIA guidance, which of the following is the most appropriate way for the CAE to react?
The chief audit executive (CAE) has hired a new internal auditor who was immediately assigned to a procurement function audit. Because the new auditor ' s name is similar to that of the procurement manager, some staff members think the two are related, although they are not. Which of the following actions is most appropriate for the CAE to take?
At a conference, an interna! auditor presented a new computer-assisted audit technique developed by his organization. The presentation included sample data derived from performing audit engagements for the organization. Travel costs were paid by the conference organizers, and the trip was approved by the chief audit executive (CAE).
However, neither management nor the CAE was aware that the internal auditor would be making a presentation based on work completed for the organization. According to IIA guidance, which of the following statements is most relevant regarding the actions of the auditor?
TESTED 26 Jul 2026
