Free IIA-ACCA Exam Braindumps
ACCA CIA Challenge Exam Questions 231–235 (page: 48)

Updated On: 9-Feb-2026

A large retail organization, which sells most of its products online, experiences a computer hacking incident. The chief IT officer immediately investigates the incident and concludes that the attempt was not successful. The chief audit executive (CAE) learns of the attack in a casual conversation with an IT auditor.
Which of the following actions should the CAE take?
1. Meet with the chief IT officer to discuss the report and control improvements that will be implemented as a result of the security breach, if any.
2. Immediately inform the chair of the audit committee of the security breach, because thus far only the chief IT officer is aware of the incident.
3. Meet with the IT auditor to develop an appropriate audit program to review the organization's Internet-based sales process and key controls.
4. Include the incident in the next quarterly report to the audit committee.

  1. 1 and 2
  2. 1 and 3
  3. 2 and 4
  4. 3 and 4

Answer(s): A



During an assurance engagement, an internal auditor noted that the time staff spent accessing customer information in large Excel spreadsheets could be reduced significantly through the use of macros. The auditor would like to train staff on how to use the macros.
Which of the following is the most appropriate course of action for the internal auditor to take?

  1. The auditor must not perform the training, because any task to improve the business process could impact audit independence.
  2. The auditor must create a new, separate consulting engagement with the business process owner prior to performing the improvement task.
  3. The auditor should get permission to extend the current engagement, and with the process owner's approval, perform the improvement task.
  4. The auditor may proceed with the improvement task without obtaining formal approval, because the task is voluntary and not time-intensive.

Answer(s): C



According to IIA guidance, which of the following strategies would add the least value to the achievement of the internal audit activity's (IAA's) objectives?

  1. Align organizational activities to internal audit activities and measure according to the approved IAA performance measures.
  2. Establish a periodic review of monitoring and reporting processes to help ensure relevant IAA reporting.
  3. Use the results of IAA engagement and advisory reporting to guide current and future internal audit activities.
  4. Establish a format and frequency for IAA reporting that is appropriate and aligns with the organization's governance structure.

Answer(s): A



According to IIA guidance, which of the following statements best justifies a chief audit executive's request for external consultants to complement internal audit activity (IAA) resources?

  1. The organization's audit universe is extensive and diverse.
  2. There has been an increase in unanticipated requests for advisory work.
  3. Previous work provided by the external service provider has been of great quality and value.
  4. A recent benchmarking study found that using external service providers is a common practice of similarly-sized IAAs in other organizations.

Answer(s): B



The chief audit executive (CAE) of a small internal audit activity (IAA) plans to test conformance with the Standards through a quality assurance review. According to the Standards, which of the following are acceptable practice for this review?
1. Use an external service provider.
2. Conduct a self-assessment with independent validation.
3. Arrange for a review by qualified employees outside of the IAA.

4. Arrange for reciprocal peer review with another CAE.

  1. 1 and 2
  2. 2 and 4
  3. 1, 2, and 3
  4. 2, 3, and 4

Answer(s): A



Viewing page 48 of 122
Viewing questions 236 - 240 out of 604 questions


Post your Comments and Discuss IIA IIA-ACCA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!