Midterms

Question 1

Formal document that defines the internal audit activity’s purpose, authority, and responsibility. Establishes the internal audit activity’s position within the organization, authorizes access to records, personnel, and physical properties

Answer 1

Internal audit chapter

Question 2

Who is responsible for final approval of internal audit charter?

Answer 2

The Board

Question 3

The CAE reports functionally to the _______ and administratively to the organization’s __________. This facilitates organizational independence.

Answer 3

The CAE reports functionally to the board and administratively to the organization’s CEO. This facilitates organizational independence.

Question 4

_________________ is the reporting relationship within the organization’s management structure that facilitates the day-to-day operations of the internal audit activity. It typically includes:
- budgeting and management accounting
- human resources administration
- internal communications and information flows
- administration of the internal audit activity’s policy and procedures

Answer 4

Administrative Reporting

Question 5

______________ occurs when the CAE regularly attends and participates in board meetings that relate to the board’s oversight responsibilities for auditing, financial reporting, organizational governance, and control.

Answer 5

Direct communication

Question 6

How often should the CAE meet privately with the board?

Answer 6

At least annually

Question 7

___________ means the internal auditors perform engagements in such a manner that the have an honest belief in their work product and no significant quality compromises are made.

Answer 7

Individual objectivity

Question 8

___________ involves the CAE organizing staff assignments that prevent potential and actual conflict of interest and bias.

Answer 8

Individual objectivity

Question 9

The internal auditor recommends standards of control for systems or reviews procedures before they are implemented. Is his objectivity adversely affected?

Answer 9

No. The internal auditor’s objectivity is not adversely affected when the auditor recommends standards of control for systems or reviews procedures before they are implemented.

The auditor’s objectivity is considered to be impaired if the auditor designs, installs, drafts procedures for, or operates such systems.

Question 10

________________________ is a situation in which an internal auditor, who is in a position of trust, has a competing professional or personal interest.

Answer 10

Conflict of interest. A conflict of interest exists even if no unethical or improper act results.

Question 11

______________ is a restriction placed on the internal audit activity that precludes the activity from accomplishing its objectives and plans.

Answer 11

Scope limitation

Among other things, a scope limitation may restrict:
- scope defined in the internal audit charter
- internal audit activity’s access to records, personnel, and physical properties
- approved engagement work schedule
- performance of necessary engagement procedures
- approved staffing plan and financial budget

Question 12

(T/F) Internal auditors should accept fees, gifts, or entertainments from an employee, client, customer, supplier, or business associate that may create the appearance that the auditor’s objectivity has been impaired.

Answer 12

FALSE.
Internal auditors are NOT accept fees, gifts, or entertainments from an employee, client, customer, supplier, or business associate that may create the appearance that the auditor’s objectivity has been impaired.
UNLESS promotional items (such as pens, calendars, or samples) that are available to employees and the general public and have minimal value.

Question 13

(T/F) Objectivity is presumed to be impaired if an auditor provides assurance services for an activity for which the auditor had responsibility in the previous year

Answer 13

TRUE.
Internal auditors must refrain from assessing specific operations for which they were previously responsible until at least one year has elapsed.

Question 14

Should internal auditors accept responsibility for non-audit functions or duties?

Answer 14

NO.
Auditors are not to accept responsibility for non-audit functions or duties that are subject to periodic internal audit assessments. If they have this responsibility, then they are not functioning as internal auditors.
Assurance engagements for functions over which the CAE has responsibility must be overseen by a party outside the internal audit activity.

Question 14

What happens when the internal audit charter contains specific restrictions or limiting language regarding the assignment of non-audit functions to the internal auditor?

Answer 14

Disclosure and discussion with management of such restrictions is necessary. If the management insists, then disclosure and discussion with the board is necessary.

When the internal audit activity accepts operational responsibilities and that operation is part of the internal audit plan, the CAE needs to minimize impairment to objectivity and disclose the operating responsibilities of the internal auditor

Question 15

___________________ includes conforming with the Code of Ethics and, as appropriate, the organization’s Code of Conduct.

Answer 15

Due Professional Care

Question 16

What are the two essential components of Code of Ethics?

Answer 16

1. Principles that are relevant to the profession and practice of internal auditing: integrity, objectivity, confidentiality, and competency
2. Rules of conduct that describe behavioral norms expected of internal auditors

Question 17

Refers to the knowledge, skills, and other competencies that are required of internal auditors to effectively carry out their professional responsibilities.

Answer 17

Proficiency.

Internal auditors are encouraged to demonstrate their proficiency by obtaining appropriate professional certifications and qualifications.

Question 18

Ability to apply knowledge to situations likely to encountered and to deal with them appropriately without extensive recourse to technical research and assistance.

Answer 18

Proficiency

Question 19

Ability to apply broad knowledge to situations likely to encountered, to recognize significant deviations, and to be able to carry out the research necessary to arrive at reasonable solutions

Answer 19

Understanding

Question 20

Ability to recognize the existence of problems or potential problems and to identify the additional research to be undertaken or the assistance to be obtained

Answer 20

Appreciation

Question 21

Does every member of the internal audit activity need to be qualified in all disciplines?

Answer 21

NO.

The internal audit activity may use external service providers or internal resources that are qualified in disciplines to meet the internal audit activity’s responsibilities.

Question 22

Person or firm, independent of the organization that has special knowledge, skill, and experience in a particular discipline.

Answer 22

External service provider

Question 23

Services beyond the requirements of audit standards generally accepted by external auditors

Answer 23

Extended audit services

CAE needs to ascertain that work performed by external auditors does not impair the external auditor’s independence. If external auditors act or appear to act as members of senior management, management, or as employees of the organization, then their independence is impaired.

Question 24

When CAE issues engagement communications and an external service provider was used, should the CAE refer to such services provided?

Answer 24

The CAE may, as appropriate, refer to such services provided. The external service provider needs to be informed and, if appropriate, concurrence should be obtained before making such reference in engagement communications

Question 25

Application of the care and skill expected of a reasonably prudent and competent internal auditor in the same or similar circumstances

Answer 25

Due professional care. Due professional care is appropriate to the complexities of the engagement being performed. It involves internal auditors being alert to the possibility of fraud, intentional wrongdoing, errors and omissions, inefficiency, waste, ineffectiveness, and conflicts of interest

Question 26

Designed by the CAE to enable an evaluation of the internal audit activity's conformance with the Definition of Internal Auditing and the Standards and an evaluation of whether internal auditors apply the Code of Ethics

Answer 26

Quality Assurance and Improvement Program. The program also assesses the efficiency and effectiveness of the internal audit activity and identifies opportunities for improvement

Question 27

Who should head the formal QAIP function in large or complex organizations?

Answer 27

**Internal audit executive**, independent of the audit and consulting segments of the internal audit activity The executive administers and monitors the activities needed for a successful QAIP

Question 28

Ongoing and periodic assessment of the entire spectrum of audit and consulting work performed by the internal audit activity.

Answer 28

Quality Assurance and Improvement Program These ongoing and periodic assessments are composed of rigorous, comprehensive processes, continuous supervision and testing of internal audit and consulting work, and periodic validations of conformance with the Definition of Internal Auditing, the Code of Ethics, and the Standards.

Question 29

What is the basis for periodic internal assessments?

Answer 29

IIA's Quality Assessment Manual or a comparable set of guidance and tools

Question 30

_______________ is an integral part of the day-to-day supervision, review, and measurement of the internal audit activity. It is incorporated into the routine policies and practices used to manage the internal audit activity and uses processes, tools, and information considered necessary to evaluate conformance with the Definition of Internal Auditing, the Code of Ethics, and the Standards

Answer 30

Ongoing monitoring

Question 31

Assessments conducted to evaluate conformance with the Definition of Internal Auditing, the Code of Ethics, and the Standards

Answer 31

Periodic reviews

Question 32

(T/F) if the periodic internal assessment is performed by a qualified, independent external reviewer or review team, the assessment results should not communicate any assurances on the outcome of subsequent external quality assessment.

Answer 32

FALSE

Question 33

Cover the entire spectrum of audit and consulting work performed by the internal audit activity and should not be limited to assessing its quality assurance and improvement program

Answer 33

External assessments External assessments must be conducted at least once every five years by a qualified, independent reviewer or review team from outside the organization.

Question 34

What are the two ways that external assessment could be performed?

Answer 34

1. Full external assessment by a qualified, independent external reviewer or review team 2. Comprehensive internal self-assessment with independent validation by a qualified, independent external reviewer or review team

Question 35

______________________ consists of individuals who are competent in the professional practice of internal auditing and external assessment processes

Answer 35

Quality reviewer or quality review team

Question 36

___________________ means not having either real or apparent conflict of interest and not being a part of, or under the control of, the organization to which the internal audit activity belongs

Answer 36

Independent reviewer or review team

Question 37

_________________ may be a parent organization, an affiliate in the same group of entities, or an entity with regular oversight, supervision or quality assurance responsibilities

Answer 37

Related organization

Question 38

____________ requires reviewers to be honest and candid within the constraints of confidentiality

Answer 38

Integrity

Question 39

__________________ is a state of mind and a quality that lends value to a reviewer(s) services. Imposes the obligation to be impartial, intellectually honest, and free of conflict of interest

Answer 39

Objectivity

Question 40

_______________ means the practices of the internal audit activity, taken as a whole, to satisfy the requirements of the Definition of Internal Auditing, the Code of Ethics, and the Standards

Answer 40

Conformance

Question 41

__________________ means the impact and severity of the deficiencies in the practices of the internal audit activity are so significant that they impair the internal audit activity's ability to discharge its responsibilities

Answer 41

Non-conformance

Question 42

A judgement that considers the professional internal audit experience and professional credentials of the individuals selected to perform the review

Answer 42

Evaluation of the competency of the reviewer and review team. The evaluation considers the professional internal audit experience and professional credentials of the individuals selected to perform the review. The evaluation also considers the size and the complexity of the organizations that the reviewers have been associated with.

Question 43

Who is responsible for disclosing instances of non-conformance that impact the overall scope or operation of the internal audit activity to senior management and the board?

Answer 43

CAE

Question 44

List of all possible audits that could be performed

Answer 44

Audit universe

Question 45

The CAE must establish _______ to determine the priorities of the internal audit activity, consistent with the organization's goals

Answer 45

Risk-based plans. The CAE is responsible for developing a risk-based plan. The CAE takes into account the organization's risk management framework, including using risk tolerance levels set by management for the different activities or part of the organization

Question 46

___________ likely reflect the organization's attitude toward risk and the degree of difficulty to achieving planned objectives

Answer 46

Strategic plan The audit universe can include components from the plan in forming risk-based plans. Strategic plans also likely reflect the organization's attitude toward risk and the degree of difficulty to achieving planned objectives.

Question 47

How often should the audit universe be assessed?

Answer 47

It is advisable to assess the audit universe on at least an **annual basis** to reflect the most current strategies and direction of the organization

Question 48

Who is primarily responsible for the sufficiency and management of internal audit resources?

Answer 48

CAE is primarily responsible for the sufficiency and management of internal audit resources in a manner that ensures the fulfillment of the internal audit responsibilities.

Question 49

__________________ is conducted by the CAE to determine the specific skills required to perform the internal audit activities

Answer 49

Periodic skills assessment or inventory

Question 50

_____________ refers to the mix of knowledge, skills, and other competencies needed to perform the plan.

Answer 50

Appropriate

Question 51

_____________ refers to the quantity of resources needed to accomplish the plan

Answer 51

Sufficient

Question 52

Who is responsible for oversight of the work of external auditors, including coordination with the internal audit activity?

Answer 52

The board

Question 53

Who is responsible for regular evaluations of the coordination between internal and external auditors?

Answer 53

CAE Such evaluations may also include assessments of the overall efficiency and effectiveness of internal and external audit activities, including aggregate audit cost. These results are communicated to senior management and board