CIA IIA-CIA-Part2 Reddit Questions

The primary objectives of engagement supervision in internal auditing, according to IIA guidance, involve several key activities: identifying engagement objectives, assigning responsibilities to individual auditors, and approving the engagement program. These steps are essential to ensure that the audit is conducted effectively and that the objectives are met.

IIA Standard 2340 – Engagement Supervision:

This standard outlines the responsibilities of those supervising audit engagements. Supervisors must ensure that the audit is properly planned, that objectives are clearly defined, that the right personnel are assigned, and that the engagement program is appropriate for achieving the objectives.

Key Activities in Supervision:

Identifying Engagement Objectives: This is the first step in ensuring that the audit addresses the most important risks and areas of concern. The supervisor must ensure that these objectives are clear and aligned with the organization’s goals.

Assigning Responsibilities: Supervisors must ensure that tasks are allocated to auditors who have the appropriate skills and experience to carry them out effectively.

Approving the Engagement Program: The engagement program outlines the procedures and steps that will be taken to achieve the audit objectives. The supervisor’s approval ensures that the program is comprehensive and aligned with the audit’s goals.

IIA Practice Advisory 2340-1:

The advisory emphasizes the role of the auditor in charge in providing guidance, ensuring that objectives are met, and that the audit is conducted efficiently and effectively.

Option A (Enable training and development): While important, training and development are secondary objectives and not the primary focus of engagement supervision.

Option C (Training and development): Again, while important, these are supportive activities rather than the core focus of engagement supervision.

Option D (Training, development, and objectives): This option combines important activities but does not include assigning responsibilities, which is crucial in supervision.

Detailed Explanation:Why Not Other Options?

According to the IIA guidance, the most appropriate next step when discovering a sales manager approving contracts beyond their authorization limit is to communicate the finding to the supervisor of the sales manager through an interim report. This approach ensures that the issue is addressed promptly and management can take immediate corrective actions to prevent further unauthorized activities. Including new contracts under negotiation in the final report would delay action, while reminding the sales manager of their authority limits does not escalate the issue appropriately.

References:

IIA Standards: 2440 - Disseminating Results

IIA Practice Guide: Communicating Audit Results

In a mature control environment with limited internal audit resources, internal auditors should focus their testing on preventive key controls. Preventive controls are designed to stop errors or irregularities before they occur, making them crucial for maintaining control effectiveness. Key controls are the most important controls in mitigating risks to an acceptable level. By focusing on these, internal auditors can ensure that the most critical risks are managed effectively despite limited resources. References:

The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2320 - Analysis and Evaluation.

The IIA’s Practice Guide on Assessing the Adequacy of Control Processes.

The statement that the risk management process supports internal audit by evaluating whether critical controls are adequate and effective is true. The risk management process provides a framework for identifying, assessing, and managing risks, and internal audit uses this information to evaluate the adequacy and effectiveness of controls in place to mitigate those risks. This support helps internal audit focus on areas of high risk and ensure that controls are functioning as intended.

References:

IIA Standards: 2120 - Risk Management

IIA Practice Guide: Assessing the Adequacy of Risk Management Processes