IIA-CIA-Part2 Exam Dumps - Internal Audit Engagement

When developing the objectives for an assurance engagement in a newly acquired subsidiary, the most critical items to consider are the organizational strategy, objectives, risks, control framework, and the expectations of stakeholders regarding the audit. This holistic approach ensures that the internal audit aligns with the broader goals and risk management processes of the organization, providing a comprehensive evaluation of the subsidiary ' s operations within the context of the entire entity.

Organizational Strategy and Objectives: Understanding the overarching goals and strategic direction of the organization helps to align the audit objectives with business priorities and ensures that the subsidiary’s operations are evaluated in the context of their contribution to these goals.

Risks: Identifying and assessing the risks associated with the subsidiary is essential for focusing audit efforts on areas that could significantly impact the organization. This involves understanding both inherent and residual risks.

Control Framework: Evaluating the existing control framework within the subsidiary helps determine the adequacy and effectiveness of controls in mitigating identified risks.

Stakeholder Expectations: Considering what stakeholders expect from the audit helps in shaping objectives that address key concerns and provide valuable insights, fostering greater acceptance and implementation of audit recommendations.

This comprehensive approach ensures the audit is relevant, targeted, and capable of adding significant value to the organization by addressing key risk areas and strategic objectives.

The Institute of Internal Auditors (IIA) Standards

IIA Practice Guide: Formulating and Expressing Internal Audit Opinions

Strategic goals are long-term, broad, and mission-driven.

Options A, B, and C represent short-term operational or tactical goals.

Option D (carbon neutrality in 5 years) represents a long-term strategic goal.

The observation provided in the final engagement communication includes the criteria (competitive bidding requirements), condition (three of the 10 contracts reviewed did not meet these requirements), and cause (senior management deemed these purchases critical and awarded them as sole-source). However, it lacks the effect, which would explain the potential consequences or impact of not meeting the competitive bidding requirements, such as increased costs, lack of transparency, or potential for favoritism. References:

The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2410 - Criteria for Communicating.

The IIA’s Practice Guide on Communicating Results.

Comprehensive and Detailed Explanation:

Completeness in invoicing means that all services delivered (electricity consumed) are properly billed. Therefore, the most effective approach is directly comparing consumption data with billed amounts (D) to identify unbilled usage. Options A and C provide insight into payment behavior or consumption trends but do not test billing completeness. Option B (ratio analysis) could provide high-level patterns but would not pinpoint specific missing invoices. The most reliable procedure is a one-to-one reconciliation between metered consumption and invoicing data, as it ensures every unit of electricity delivered is accounted for in billing. This method aligns with IIA Standard 2310 – Identifying Information, which requires sufficient, relevant, and reliable evidence to support audit conclusions. By directly comparing inputs (consumption) and outputs (invoices), the auditor can identify systemic gaps, errors, or fraud in the billing process.

Per Standard 2330 – Documenting Information, workpapers must be sufficient, reliable, relevant, and useful. Irrelevant workpapers that do not support engagement objectives should not be retained, as they clutter documentation and weaken audit quality. The supervisor should ensure that only workpapers directly tied to objectives are included, which makes Option A correct.

Contracts are typically drafted during the development phase of the contracting process. This phase follows the initiation and bidding phases and involves detailed negotiations and the preparation of formal agreements that outline the terms and conditions of the proposed business activity. This ensures that both parties have a clear understanding of their obligations and expectations before the contract is finalized and executed

When interviewing a fraud suspect, it is important to gather both subjective and objective information (Option 1). Subjective information can include opinions or perspectives, which may provide insights into motivations or behaviors, while objective information consists of factual data. The interviewer typically begins with open-ended questions (Option 3) to allow the suspect to provide information freely and without leading them to specific answers. The primary objective is to gather information rather than to obtain a written confession (Option 2), and video recordings, while beneficial in certain cases, are not always used and thus not a standard requirement (Option 4). References:

The IIA’s Practice Guide on Conducting Internal Audits in Conformance with the International Standards for the Professional Practice of Internal Auditing (Standards).

The IIA’s Practice Guide on Fraud Auditing and Investigation.

If the chief audit executive (CAE) is uncertain that the current audit team has all the required knowledge to conduct the engagement, the most appropriate course of action is to use an external service provider. This helps preserve the independence and objectivity of the internal audit function.

Expertise: External service providers bring specialized knowledge and expertise that may not be available within the internal team.

Independence: Utilizing an external provider ensures that the audit maintains its independence and objectivity, avoiding any potential conflicts of interest.

Quality: Ensures that the audit engagement is conducted with the highest standards, leveraging the external provider ' s experience and skills.