Which action would most likely be included in the corporate social responsibility program of an organization?
Answer(s): A
Corporate social responsibility programs commonly include initiatives that promote ethical sourcing and environmental stewardship. Ensuring supplier compliance with environmental regulations reflects a commitment to responsible business practices and sustainability within the organization’s value chain.
Which of the following internal control attributes would an internal auditor test to understand whether organizational structure supports effective internal control?
Answer(s): D
Internal reporting responsibilities reflect how authority, accountability, and communication lines are structured within the organization. Testing whether reporting relationships are clearly defined and properly aligned helps determine whether the organizational structure supports effective internal control.
An internal audit function within a commercial bank performs an annual audit of the bank’s anti-money laundering compliance program as required by anti-money laundering regulations. This report is submitted to regulators annually as proof that the audit was performed. Which of the following concepts is illustrated in this scenario?
Conducting an annual audit of the anti-money laundering compliance program and reporting the results to regulators represents an assurance service. The internal audit function is providing an independent evaluation of compliance with regulatory requirements and issuing a formal conclusion based on sufficient and appropriate evidence.
Which of the following scenarios represents a top-down flow of information regarding corporate governance?
A top-down flow of information in corporate governance occurs when decisions, direction, or oversight actions originate from the highest governing body and cascade downward. The board approving the annual budget reflects governance-level oversight and direction flowing from the top of the organization.
The board asked the chief audit executive (CAE) to assume responsibility for a newly formed risk management function while retaining responsibility for the internal audit function. The new function is comprised of both risk and compliance activities. How should next year’s internal audit of the risk management function be performed?
When the chief audit executive assumes responsibility for the risk management function, the internal audit function’s independence and objectivity are impaired with respect to auditing that area. To maintain independence and provide credible assurance, the audit of the risk management function should be performed by a competent assurance provider external to the internal audit function.
According to IIA guidance, which of the following roles for the internal audit function regarding risk management are acceptable with appropriate safeguards in place?
Maintaining and developing the risk management framework can be an acceptable consulting role for the internal audit function if appropriate safeguards are in place to preserve independence and objectivity. Management remains responsible for risk ownership and decision-making, while internal audit may provide support or facilitation without assuming accountability.
Which of the following functions does an internal audit charter serve?
The internal audit charter formally defines the purpose, authority, and responsibilities of the internal audit function and is approved by senior management and the board. It serves as a written agreement that establishes the function’s role within the organization and its reporting relationships.
An organization has discovered that an excessive number of labor hours has been entered into a costing system. Which of the following controls should the organization implement to prevent this issue from reoccurring?
Programming input fields with maximum attributes establishes predefined limits that prevent the entry of excessive labor hours at the point of data input. This preventive control directly blocks unreasonable values from being recorded, reducing the likelihood of recurrence.
Post your Comments and Discuss IIA CIA-Part1-2025 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CIA-Part1-2025 content, but please register or login to continue.