W1 Flashcards
(84 cards)
The IIA’s definition of internal auditing emphasizes the effectiveness of which of the following?
a. Value, cost, and benefit propositions.
b. Inherent risk, residual risk, and total risk.
c. Risk management, control, and governance processes.
d. Purpose, nature, and scope of work.
c. Risk management, control, and governance processes.
Which of the following adds value to the others?
a. Governance processes.
b. Risk management processes.
c. Internal audit activities.
d. Control processes.
c. Internal audit activities.
All of the following are examples of consulting services except:
a. Legal counsel engagement.
b. System security engagement.
c. Advice engagement.
d. Facilitation engagement.
b. System security engagement.
All of the following are examples of assurance services except:
a. Financial engagement.
b. Compliance engagement.
c. Due diligence engagement.
d. Training engagement.
d. Training engagement.
The IIA’s Practice Advisories do not contain which of the following?
a. Approaches.
b. Considerations.
c. Processes or procedures.
d. Methodologies.
c. Processes or procedures.
According to the IIA’s Organizational Independence Standard, which of the following is not a part of functional reporting to the board?
a. Audit charter.
b. Audit risk assessment.
c. Audit budgets.
d. Audit plan.
c. Audit budgets.
The IIA’s Practice Guides do not contain which of the following?
a. Good practices.
b. Tools and techniques.
c. Programs.
d. Deliverables.
a. Good practices.
Which of the following differs between assurance services and consulting services when exercising due professional care?
a. Costs and benefits.
b. Complexity of work.
c. Extent of work.
d. Materiality.
d. Materiality.
Which of the following is driving the need for assurance maps?
a. Risk managers.
b. Board members.
c. Internal auditors.
d. Compliance practitioners.
b. Board members.
The chief audit executive establishes a method for prioritizing all of the following except:
a. Business units with low risk levels.
b. Branch or field office with low risk levels.
c. Outstanding risk areas.
d. Low inherent risk areas.
d. Low inherent risk areas.
Risk registers describe direct links between which of the following?
a. Risk acceptance and risk avoidance.
b. Risk categories and risk aspects.
c. Risk assignment and risk sharing.
d. Risk limitation and risk spreading.
b. Risk categories and risk aspects.
All of the following provide effective relationship in the organization’s governance framework except:
a. Organizational processes.
b. Governance.
c. Risk management.
d. Internal controls.
a. Organizational processes.
Which of the following internal audit assessments belong to specific governance processes?
a. Whistleblower process.
b. Risk management audit process.
c. Internal control over financial reporting.
d. Fraud risks.
a. Whistleblower process.
Ensuring internal audit teams have the right competencies with right level of work experience and designing effective internal audit procedures can reduce the risk of which of the following?
a. Business risk.
b. Audit failures.
c. Audit false assurance.
d. Audit reputation risk.
b. Audit failures.
Consulting engagement objectives must be consistent with all of the following except:
a. Organization’s goals.
b. Organization’s values.
c. Organization’s strategies.
d. Organization’s objectives.
a. Organization’s goals.
Which of the following is the major purpose of performing analytical procedures in internal audits?
a. To perform additional audit procedures.
b. To plan the audit engagement.
c. To obtain audit evidence.
d. To study relationships among elements of information.
c. To obtain audit evidence.
According to the IIA Standards, which of the following is not included in the scope of the internal audit function?
a. Appraising the effectiveness and efficiency of operations and programs.
b. Reviewing the strategic management process, assessing the quality of management decision making both quantitatively and qualitatively and reporting the results to the audit committee.
c. Reviewing the means of safeguarding assets.
d. Complying with the laws, regulations, policies, procedures, and contracts.
b. Reviewing the strategic management process, assessing the quality of management decision making both quantitatively and qualitatively and reporting the results to the audit committee.
An internal auditor is auditing the financial operations of an organization. Which of the following is not specified by the IIA Standards for inclusion in the scope of the audit?
a. Reviewing the reliability and integrity of financial and operational information.
b. Reviewing the compliance with laws, regulations, policies, procedures, and contracts.
c. Appraising the effectiveness and efficiency of operations and programs.
d. Reviewing the financial decision-making process.
d. Reviewing the financial decision-making process.
The audit committee of an organization has charged the chief audit executive (CAE) with bringing the department into full compliance with the IIA Standards. The CAE’s first task is to develop a charter. Identify the item that should be included in the statement of objectives:
a. Report all audit findings to the audit committee every quarter.
b. Notify governmental regulatory agencies of unethical business practices by organization management.
c. Determine the adequacy and effectiveness of the organization’s systems of internal controls.
d. Submit departmental budget variance reports to management every month.
c. Determine the adequacy and effectiveness of the organization’s systems of internal controls.
If an auditee’s operating standards are vague and thus subject to interpretation, the auditor should:
a. Seek agreement with the auditee as to the standards to be used to measure operating performance.
b. Determine best practices in this area and use them as the standard.
c. Interpret the standards in their strictest sense because standards are otherwise only minimum measures of acceptance.
d. Omit any comments on standards and the auditee’s performance in relationship to those standards, because such an analysis would be meaningless.
a. Seek agreement with the auditee as to the standards to be used to measure operating performance.
In which of the following situations does the auditor potentially lack objectivity?
a. An auditor reviews the procedures for a new electronic data interchange connection to a major customer before it is implemented.
b. A former purchasing assistant performs a review of internal controls over purchasing four months after being transferred to the internal auditing department.
c. An auditor recommends standards of control and performance measures for a contract with a service organization for the processing of payroll and employee benefits.
d. A payroll accounting employee assists an auditor in verifying the physical inventory of small motors.
b. A former purchasing assistant performs a review of internal controls over purchasing four months after being transferred to the internal auditing department.
. Which of the following actions would be a violation of auditor independence?
a. Continuing on an audit assignment at a division for which the auditor will soon be responsible as the result of a promotion.
b. Reducing the scope of an audit due to budget restrictions.
c. Participating on a task force which recommends standards for control of a new distribution system.
d. Reviewing a purchasing agent’s contract drafts prior to their execution.
a. Continuing on an audit assignment at a division for which the auditor will soon be responsible as the result of a promotion.
The IIA’s Code of Ethics includes which of the following two essential components?
a. Definition of internal auditing and administrative directives.
b. Principles and Rules of Conduct.
c. Integrity and objectivity.
d. Confidentiality and competency.
b. Principles and Rules of Conduct.
A Certified Internal Auditor (CIA) is working in a non–internal audit position as the director of purchasing. The CIA signs a contract to procure a large order from the supplier with the best price, quality, and performance. Shortly after signing the contract, the supplier presents the CIA with a gift of significant monetary value. Which of the following statements regarding the acceptance of the gift is correct?
a. Acceptance of the gift would be prohibited only if it were noncustomary.
b. Acceptance of the gift would violate the IIA Code of Ethics and would be prohibited for a CIA.
c. Since the CIA is no longer acting as an internal auditor, acceptance of the gift would be governed only by the organization’s code of conduct.
d. Since the contract was signed before the gift was offered, acceptance of the gift would not violate either the IIA Code of Ethics or the organization’s code of conduct.
b. Acceptance of the gift would violate the IIA Code of Ethics and would be prohibited for a CIA.