IIA-CIA-Part2 Exam Dumps - Practice of Internal Auditing

Facilitated team workshops are the method of examining entity-level controls that involve gathering information from work groups that represent different levels in an organization. These workshops encourage interactive discussion and collaboration among participants from various departments and hierarchical levels, providing a comprehensive view of entity-level controls and promoting a better understanding of control processes and issues.

IIA Standards: 2210 - Engagement Objectives

IIA Practice Guide: Assessing the Adequacy of Risk Management Processes

Meeting with the procurement card program administrator is a crucial step in identifying relevant risks and controls. This individual can provide detailed insights into how the procurement card program operates, potential risks, existing controls, and any issues or areas of concern. This information is vital for developing a comprehensive understanding of the program and for planning the audit engagement effectively. Actions like comparing card transaction types against policy guidelines, determining cardholder limit exceedances, and developing scope and objectives are important but are typically undertaken after initial risk and control identification.

The Institute of Internal Auditors (IIA) - Practice Guide: Engagement Planning

According to the IIA’s Implementation Guide for Standard 2340 - Engagement Supervision1, one of the activities that the chief audit executive or the designated engagement supervisor should perform is to review and approve the engagement work program before the commencement of fieldwork. The engagement work program should be based on the engagement objectives, scope, and approach, and should reflect the risks and controls identified during the planning phase. The engagement work program should also be discussed with the engagement team to ensure that they understand the tasks and procedures to be performed, and to address any questions or concerns. The engagement supervisor should document the approval of the work program and any subsequent changes in the workpapers.

ï‚· Supervision in Internal Audit: Effective supervision ensures that the engagement is carried out according to plan, objectives are met, and quality standards are maintained. It involves guiding, mentoring, and reviewing the work of auditors throughout the engagement.

ï‚· IIA Standards:

Standard 2340 – Engagement Supervision: Internal audit engagements must be properly supervised to ensure objectives are achieved, quality is maintained, and staff are developed.

Proper supervision includes overseeing the engagement, providing direction, and ensuring that work complies with standards and achieves engagement objectives.

ï‚· Examples of Proper Supervision:

Reasonable Assurance: The auditor in charge providing reasonable assurance that engagement objectives were met is a fundamental aspect of effective supervision. It ensures that the engagement delivers the intended outcomes and adheres to quality standards.

Daily Records and Workpaper Review: Options A and B involve administrative tasks and peer review, which are supportive but do not alone constitute comprehensive supervision.

Accompanied Training: Option C involves on-the-job training, which is beneficial but not the primary aspect of engagement supervision.

Narrative memoranda are used in internal auditing to describe processes in a clear and detailed manner, especially when the process is simple. This method is effective for documenting straightforward processes where a flowchart or other visual representation might be unnecessary or overly complex.

IIA Standard 2330 – Documenting Information:

This standard requires that internal auditors document relevant information to support engagement conclusions and recommendations. Narrative memoranda are one way to document processes, particularly when the process is simple and can be easily described in text.

Use of Narrative Memoranda:

Narrative memoranda provide a written account of a process, outlining each step in a sequential manner. This method is particularly useful for simple processes where the key points can be easily captured in a narrative form, without the need for complex diagrams.

Efficiency in Documentation:

For simple processes, a narrative memorandum is more efficient than a detailed flowchart. It allows the auditor to explain the process clearly and concisely, ensuring that all necessary information is captured without unnecessary detail.

Option A (Detailed risk assessment): A narrative memorandum is not typically used for risk assessments, which require more detailed analysis and often visual aids.

Option B (Identify key roles): While a narrative can mention roles, this is not its primary purpose.

Option D (Document outputs): Documenting outputs that support other activities typically requires more detailed mapping, such as flowcharts or tables.

Detailed Explanation:Why Not Other Options?Conclusion: Option C is correct because narrative memoranda are best suited for explaining simple processes in a clear and concise manner, in line with IIA documentation standards.

Detective controls are designed to identify and detect errors or fraud after they have occurred. Receipts for employee expenses serve as a detective control by providing evidence of transactions, enabling verification and review of expenses to identify any fraudulent or unauthorized activities. Awareness of prior incidents of fraud (Option A) is more of a preventive control, contractor non-disclosure agreements (Option B) are preventive controls to mitigate risks of information leakage, and verification of currency exchange rates (Option C) is more of a transaction control. References: IIA Glossary – Detective Controls, COSO Framework

Matching invoices to receiving reports ensures the organization only pays for goods it has actually received, addressing completeness and accuracy in financial transactions. This procedure aligns with the COSO Internal Control Framework's principles regarding transaction processing and control activities. It mitigates risks of paying for unordered or unreceived goods, a common source of errors and potential fraud in the accounts payable process. The IIA's CIA Part 2 syllabus emphasizes testing of key controls in financial systems, including those preventing overpayments (Section II: Audit Engagements).

Physically inspecting a sample of completed processing cycles for defective products provides direct evidence of the effectiveness of the quality control process. This method allows the internal auditor to observe firsthand whether defective products are being identified and removed prior to shipment, ensuring that the process operates as intended. This approach is more reliable than survey results or management reports, which may be subject to bias or inaccuracies.

The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard 2320 - Analysis and Evaluation