CIA Part 2

What is the first step in planning an internal audit engagement?

• ADevelop the audit work program
• BEstablish engagement objectives and scope
• CPerform detailed testing of controls
• DDraft the final audit report

Which of the following best describes the purpose of a preliminary survey in engagement planning?

• ATo conduct detailed testing of all controls
• BTo gather background information and identify potential risk areas
• CTo prepare the final audit report
• DTo assign engagement team roles

What is the primary purpose of establishing engagement objectives?

• ATo determine the audit fee
• BTo define what the engagement is intended to accomplish
• CTo select the audit software to be used
• DTo schedule meetings with external auditors

Which factor should be considered when determining the scope of an internal audit engagement?

• AThe external auditor's work schedule
• BThe nature and extent of procedures needed to achieve objectives
• CThe audit committee's vacation schedule
• DThe availability of the company jet for travel

What is the purpose of risk assessment during engagement planning?

• ATo eliminate all risks from the organization
• BTo identify and evaluate risks relevant to the engagement
• CTo transfer risk to insurance companies
• DTo avoid all high-risk areas

Which document outlines the specific procedures to be performed during an internal audit engagement?

• AThe internal audit charter
• BThe engagement work program
• CThe annual audit plan
• DThe board minutes

What should be considered when allocating resources for an audit engagement?

• AThe color of the audit binders
• BThe number and competency of auditors needed
• CThe external auditor's brand of laptop
• DThe client's preferred meeting times only

Which of the following is an appropriate engagement objective?

• ATo find fraud in the department
• BTo evaluate whether controls over purchasing are adequate and operating effectively
• CTo prove management is incompetent
• DTo justify the internal audit budget

During planning, an internal auditor identifies that the area being audited recently implemented a new ERP system. How should this affect the engagement plan?

• ACancel the engagement until the system stabilizes
• BConsider additional risks related to system changes and adjust procedures accordingly
• CIgnore it since the system is already implemented
• DAutomatically expand the scope to the entire organization

Which of the following would be the LEAST important factor when determining the staffing of an engagement?

• AThe complexity of the area being audited
• BThe availability of auditors with specialized IT skills
• CThe personal relationships between auditors and auditee staff
• DThe time constraints for completing the engagement

What is the most appropriate action when the scope of an engagement must be limited due to resource constraints?

• AAccept the limitation and continue without documentation
• BCommunicate the scope limitation and its impact to appropriate parties
• CExpand the scope to make up for the limitation
• DCancel the engagement entirely

Which technique would be most useful when gathering information during the preliminary survey phase?

• APerforming detailed testing of all transactions
• BConducting interviews with key process owners
• CIssuing the final audit report
• DConducting statistical sampling

How should previous audit findings influence engagement planning?

• AThey should be ignored to maintain objectivity
• BThey should be reviewed to assess whether corrective actions were implemented
• CThey should be automatically included as findings in the current engagement
• DThey should be destroyed to protect client confidentiality

When planning an engagement, which of the following would indicate a higher risk that warrants additional attention?

• AA stable control environment with minimal turnover
• BA new business process with untested controls
• CAn area with strong monitoring activities
• DA department with consistent positive audit results

What is the purpose of defining criteria during engagement planning?

• ATo establish standards against which findings will be evaluated
• BTo determine the auditors' salary grades
• CTo select the audit software vendor
• DTo schedule audit committee meetings

Which of the following should be included in an engagement work program?

• AThe auditor's personal opinions about management
• BSpecific procedures to be performed, including nature, timing, and extent
• CGossip about the audited department
• DThe auditors' lunch schedules

What should an auditor do if significant new risks are identified during the engagement that were not considered in the original plan?

• AIgnore them since they were not in the original plan
• BEvaluate the risks and modify the work program if necessary
• CImmediately stop the engagement
• DWait until the next annual audit to address them

When should the engagement work program be modified?

• AOnly at the beginning of the engagement
• BWhen circumstances change or new information becomes available
• COnly when the audit committee requests changes
• DNever, once approved it cannot be changed

Which of the following best describes the relationship between engagement objectives and procedures?

• AProcedures are selected randomly regardless of objectives
• BProcedures are designed to achieve engagement objectives
• CObjectives are developed after procedures are performed
• DThere is no relationship between objectives and procedures

What is the appropriate action if an auditor lacks the necessary skills to perform a planned procedure?

• ASkip the procedure and hope no one notices
• BSeek assistance from someone with the required competency
• CPerform the procedure anyway and guess at the results
• DCancel the entire engagement

A CAE is planning an engagement of a high-risk area with limited resources. Management has requested a narrow scope that excludes certain high-risk processes. What is the CAE's best course of action?

• AAccept management's request to maintain good relations
• BAssess the risk impact, document concerns, and communicate to the audit committee if nece…
• CRefuse to conduct any engagement in that area
• DExpand the scope beyond what is feasible given resources

An engagement is being planned for an area where fraud was detected two years ago. Controls were subsequently strengthened. How should this affect planning?

• ANo special consideration is needed since the fraud is in the past
• BConsider residual fraud risk and design procedures to validate control effectiveness
• CAssume controls are perfect and eliminate fraud-related procedures
• DAutomatically conclude that fraud is still occurring

During planning, an auditor discovers that the client has already hired an external consultant to review the same process. How should this affect engagement planning?

• ACancel the internal audit engagement entirely
• BConsider coordinating with the consultant and adjusting scope to avoid duplication
• CIgnore the consultant's work and proceed as originally planned
• DAssume the consultant's work eliminates all risk

The CAE must decide whether to use data analytics specialists for an engagement. What is the most important consideration?

• AThe specialists' personal relationships with auditee staff
• BWhether the engagement objectives can be achieved more effectively with specialized skills
• CThe specialists' salary levels compared to regular auditors
• DThe auditee's preference for traditional audit methods

An auditor is planning an engagement of an international subsidiary. What additional planning considerations are most critical?

• AThe local weather patterns during the audit period
• BCultural differences, local regulations, and potential language barriers
• CThe brand of office supplies used locally
• DThe local sports team schedules

What is the primary purpose of collecting evidence during an internal audit?

• ATo support the auditor's conclusions and findings
• BTo occupy the audit team's time
• CTo create as much documentation as possible
• DTo impress the client with thoroughness

Which of the following is considered the most reliable type of audit evidence?

• AOral statements from the client's employees
• BEvidence obtained directly by the auditor through physical examination
• CCopies of documents provided by the auditee
• DRumors heard in the company cafeteria

What is the purpose of analytical procedures in an audit engagement?

• ATo design the company's financial statements
• BTo evaluate financial information by studying plausible relationships among data
• CTo determine employee salaries
• DTo select the audit software

Which data gathering technique involves selecting a subset of items from a population for examination?

• AObservation
• BSampling
• CInterviewing
• DBrainstorming

What is the primary purpose of supervision in an internal audit engagement?

• ATo ensure engagement objectives are achieved and quality standards are met
• BTo monitor employees' break times
• CTo prepare coffee for the audit team
• DTo socialize with the client

An auditor is testing IT general controls. Which test would be most effective in verifying logical access controls?

• AReviewing the organization chart
• BExamining user access rights and reviewing access logs
• CCounting the number of workstations
• DChecking the color of the server room walls

What should an auditor do when evidence indicates a potential control deficiency?

• AIgnore it if the amount is immaterial
• BGather additional evidence to confirm and understand the issue
• CImmediately report it to the media
• DAssume it is an isolated incident without further testing

Which of the following is an example of a preventive IT control?

• AReviewing system logs for unauthorized access attempts
• BRequiring password complexity and regular changes
• CInvestigating security incidents after they occur
• DAnalyzing user activity patterns

What is the appropriate response when an auditor encounters scope limitations during fieldwork?

• AContinue the engagement without documenting the limitation
• BAssess the impact and communicate to appropriate parties
• CImmediately terminate the employment of the auditor
• DAssume the area has no issues and move on

Which technique would be most effective for testing the operating effectiveness of a control that requires dual authorization for payments?

• AReviewing the policy manual
• BExamining a sample of payment transactions for evidence of dual authorization
• CInterviewing the CFO about their opinion of the control
• DCalculating the total payments for the year

What is the primary consideration when selecting a sampling method for an audit test?

• AThe auditor's personal preference
• BThe nature of the test objective and population characteristics
• CThe color coding of the audit files
• DThe auditee's favorite sampling method

An auditor observes that a key control is consistently not being performed as documented. What is the most appropriate action?

• AAssume the control is no longer needed
• BDocument the observation and investigate further to understand the reasons
• CImmediately conclude that fraud exists
• DIgnore it if management says it is not important

Which type of analytical procedure would be most useful for detecting unusual revenue transactions?

• AComparing current period revenue to prior periods and budgets
• BCounting the number of employees
• CMeasuring the size of the office
• DReviewing the company's mission statement