Module 1 Flashcards
(35 cards)
When was the IIA found?
1941
Operational Auditing is defined as a ___-___ , ____, ____ evaluation of organizational activities
Future-oriented, Systematic, Independent
What is the primary source of evidence in operational audting?
Operational Policies and Achievements
T or F: Financial data and internal controls are redundant to review after operational policies
False. They can be supplementary
What is the main goal of operational audit?
To ensure that the management and operational procedures are functioning effectively and efficiently meeting stated objectives
What is the difference between an internal audit and an operational audit?
Operational Audit can be externally outsourced
T or F: Engaging in risk based auditing means that internal auditors can scope in organizational risks
False. Broader view
What is the opposite of risk based auditing?
Controls-based auditing
Controls based auditing is an audit that focuses on internal controls. What is the problem with that?
It doesn’t consider the value of the controls they are testing to the overall process
What are the other areas that internal auditors need to look at beyond the traditional requirements?
- OpMan
- HR
- IT
- Marketing
- Corporate Social Responsibility
- Environmental Health and Safety
T or F External auditors are regarded lowly as compared to internal auditors
False. Both auditors are seen as obstacles
How do internal auditor serve the public and common interest?
Making sure that the owners receive the return on their investments they are entitled to
Ensuring that the means of generating these profits are within the confines of the law
T or F: The traditional approach to internal auditing was to perform postmortem reviews.
T
Identify the Future Oriented Threat: Reliable supply of water and electricity
Environemental
Identify the Future Oriented Threat: Building effective business partnerships
Strategic
Identify the Future Oriented Threat: business continuity due to staff turnovers
Technological
Identify the Future Oriented Threat: system development
Operational
Threats and vulnerabilities can be evaluated in ___ and ___ terms, but also beyond the ___ ___
medium, long, national borders
What are the three main skills for internal auditors by the IIA
- Communication Skills
- Problem Identification
- Knowledge on Industry Changes
What dimensions should the skills be acquired?
- Individual
- Internal Audit Unit
Integrated Auditing is the simultaneous inclusion of ___ and __ subjects in the review
Business
IT
In integrated auditing, what comes first, financial/operational or IT auditors.
Financial/operational
Identify the Standard number: Internal auditors must possess the knowledge, skills and other competencies needed to perform their individual responsiblities.
1210
Identify the Standard number: Internal auditors must have sufficient knowledge to Key IT risk and controls
1210.A3