Free IIA CIA Exam Braindumps (page: 49)

When planning the work program for an assurance engagement, an internal auditor should first review the department's business objectives and then

  1. Identify risks.
  2. Review controls.
  3. Determine scope.
  4. Evaluate vulnerabilities.

Answer(s): A



When a risk assessment process has been used to construct an audit engagement schedule, which of the following should receive attention first?

  1. The external auditors have requested assistance for their upcoming annual audit.
  2. A new accounts payable system is currently undergoing testing by the information technology department.
  3. Management has requested an investigation of possible lapping in receivables.
  4. The existing accounts payable system has not been audited over the past year.

Answer(s): C



Which of the following risk factors is most subjective?

  1. Changes in staff, systems, or the environment.
  2. Prior audit findings.
  3. Size of the unit being audited.
  4. Competency of operating management.

Answer(s): D



Which of the following would provide the most reliable information on the risk associated with an auditable activity?

  1. Event scenarios with regression analysis.
  2. Past audit findings and instances of management failures.
  3. Consequences and economic predictability of loss.
  4. Management assessment and corroboration by the internal audit activity.

Answer(s): D






Post your Comments and Discuss IIA CIA exam prep with other Community members:

CIA Exam Discussions & Posts