An internal auditor is planning a business continuity audit engagement at a remote manufacturing plant. During planning interviews, the plant manager stated that the local Environmental, Health, and Safety (EHS) Department, which reports to the plant manager, had completed a similar review six months ago. The EHS review did not find any significant weaknesses. How should the internal auditor consider the EHS review results in the current audit engagement planning?
- Ignore the EHS review results, as the department is not a reliable source of information due to its lack of objectivity and independence.
- Recommend canceling the audit engagement, as it would be a duplication of effort to revisit the same process already reviewed by EHS.
- Evaluate the objectivity and competency of the EHS reviewers and their work to determine whether their review results may be relied upon.
Answer(s): C
Explanation:
Comprehensive and Detailed Step-by-Step Reference to IIA Standards:
Standard 1220 - Due Professional Care: Internal auditors must consider the reliability of other assurance providers.
Standard 2050 - Coordination and Reliance: Internal auditors may rely on the work of other assurance providers if their objectivity, independence, and competency are assessed and deemed adequate.
Why Evaluate EHS Work:
The EHS review results can be useful if the review process was thorough, objective, and performed by competent individuals.
Dismissing their results without evaluation (Option A) could lead to inefficiencies or redundant work.
Canceling the engagement entirely (Option B) ignores the internal audit's responsibility for independent assurance.
Audit Planning Impact:
By leveraging the EHS review where appropriate, the internal auditor can focus resources on other areas not covered or on verifying key findings.
Reveal Solution
Next Question