17.3 Evaluating Auditors' Performance

Key Takeaways

  • C1d tests engagement-level evaluation of auditors' performance, not the function's HR annual review process, which is a Part 3 operations topic.
  • Standard 12.3 requires feedback about performance and opportunities for improvement so supervision develops competencies, not only inspects files.
  • Engagement feedback is judged against due professional care, quality of evidence, and communication while the work is underway, plus coaching that can still change this engagement.
  • Short engagements still require evaluation and coaching; calendar length does not create an exemption.
  • Coaching during review, including on objectivity impairments, is part of supervising the engagement, not a year-end HR task.
Last updated: August 2026

C1d asks you to describe supervisor responsibilities related to evaluating auditors' performance. The exam's trap is to confuse this with Human Resources' annual appraisal, the CAE's function-level performance measurement under Standard 12.2, utilization dashboards, bonus curves, or promotion slates. Those are operations of the internal audit function — CIA Part 3 2025 territory. Engagement supervision evaluates how this auditor performed this work: due professional care, quality of evidence, communication during the engagement, and coaching that changes the next test, not next year's form.

Standard 12.3 ties competency development to supervision. To develop competencies, the CAE must provide internal auditors with feedback about their performance and opportunities for improvement. GIAS also notes that engagement supervision gives more experienced internal auditors a chance to provide feedback and mentoring, including on potential objectivity concerns. Evaluation is therefore one of the three classic purposes of supervision — objectives achieved, quality assured, staff developed — not an optional HR courtesy when the calendar is long.

What engagement-level evaluation looks at

Due professional care is the first lens. On Part 2 you are not re-testing Part 1's definitions for their own sake; you are watching whether the auditor applied care on this assignment. Care shows up as adequate planning of the procedure, appropriate skepticism, and effort commensurate with the risk. A tester who stops at a process-owner interview for a high-risk automated control, or who ignores an obvious population gap because the sample looked clean, has a performance issue the supervisor must address now. Waiting for the annual review leaves a contaminated conclusion in this file.

Quality of evidence is the second lens, and it is the same triad used in fieldwork: relevance, reliability, and sufficiency. The supervisor's evaluation should be specific. Needs to improve documentation is not feedback. You concluded the three-way match operates effectively based on one walk-through and no sample of invoices; the evidence is not sufficient for this risk is feedback. Repeat patterns belong in the evaluation: always skipping completeness of populations, always accepting screenshots without reconciling to the system of record, always writing conclusions that are broader than the test.

Communication is the third lens — still inside this chapter's boundary. You are not selecting stakeholders or designing the engagement's formal communication plan; that is Chapter 18. You are judging whether the auditor communicated inside the team and with the activity under review in a way that protected the work: raising blockers early, not freelance-promising a rating, documenting interviews so another auditor could reperform them, writing workpapers a competent person could follow. A brilliant tester who never flags that the population is two months short is a supervision problem. A tester who is pleasant in meetings but has already told the process owner that the report will be clean is also a supervision problem.

Coaching is the action that follows observation. Supervision that only scores people after the exit meeting is late in the same way a closing stamp is late. Coaching happens in review notes, in huddles before the next sample, and in re-performance when the first attempt did not meet due care. The supervisor may reassign a test, add a reviewer, require a specialist, or sit with the auditor on the next walk-through. Those are engagement decisions and performance interventions at the same time.

Do not skip short engagements

The most testable trap in C1d is skipping evaluation because the engagement was short, the team was small, or everyone already knows how it went. GIAS does not scale the feedback duty to zero when the calendar shows four days. A four-day surprise inventory still produces evidence, conclusions, and behaviors. If a staff auditor missed cutoff boxes, argued with warehouse management, or copied last year's tick marks without looking, the supervisor still says so, still fixes the work, and still records the performance point. Short duration changes the format — a structured close-out conversation and a short written note rather than a long appraisal — not the requirement. Waiting to catch it at year-end HR leaves this engagement unsupervised on the people dimension and often leaves the quality dimension unsupervised as well.

A one-week remote test of user-access recertification is a typical exam fact pattern. The staff auditor finishes in three days, copies last year's exception log, and never mentions that the recertification campaign excluded privileged service accounts. If the supervisor skips a performance conversation because the job was short, two failures stack: the conclusion may be wrong, and the auditor will repeat the shortcut on the next access review. The C1d response is immediate coaching on due care and evidence completeness, a re-test of the excluded population, and a recorded performance note for this engagement. The annual HR form, if the function uses one, can summarize the pattern later. It cannot replace the engagement-level intervention.

Keep the record in the engagement, not only in HR

Document enough that a later reviewer can see that feedback occurred: review notes that teach, a close-out note to the auditor, and, where methodology requires it, an engagement performance form. That documentation supports Standard 12.3. It is not the annual HR packet. Do not copy confidential HR ratings into workpapers that the activity under review might later demand, and do not hide engagement quality issues only in an HR drawer the file reviewer cannot see. Quality issues that affect conclusions belong in the engagement record. Developmental coaching that does not change this file's conclusions can live in the supervision or performance file the CAE's methodology specifies.

If performance reveals an objectivity impairment — familiarity, self-review, or pressure from a former boss in the activity under review — coach immediately, reassign or add review, and treat the impairment as both an objectivity issue and a C1d performance issue. Mentoring on objectivity is explicitly part of engagement supervision in GIAS. A supervisor who waits for HR because personnel issues are sensitive has already allowed impaired work to sit in the file.

Evaluation focusEngagement-level (Part 2 C1d)Not this objective (Part 3 / HR operations)
Due professional careDid this auditor apply skepticism and appropriate effort on these tests?Department-wide competency model for next year's promotions
Quality of evidenceWere this auditor's samples, documents, and conclusions relevant, reliable, and sufficient?Function KPI for workpapers completed on time
CommunicationDid this auditor raise blockers and avoid freelance ratings?CAE board dashboard of stakeholder satisfaction
CoachingWas feedback given in time to fix this engagement and build skill?Annual HR appraisal cycle and compensation
Short engagementsStill evaluate and coach; format may be briefToo short to review people exemption — there is none
Loading diagram...
Engagement-level performance evaluation is observe, judge, coach, and document
Illustrative C1d evaluation lenses (equal teaching weights, not IIA scores)
Test Your Knowledge

An engagement lasts four days. The supervisor plans to skip individual feedback because there is no time and annual reviews will cover it. Which statement matches C1d?

A
B
C
D
Test Your Knowledge

Which evaluation focus is engagement supervision rather than function-level HR operations?

A
B
C
D
Test Your Knowledge

During workpaper review, a senior notices a staff auditor is overly familiar with the process owner and is avoiding exceptions. The best engagement-level performance response is:

A
B
C
D