Certified Internal Auditor Communication & Stakeholder Relations 2 — Questions and Answers
Question 1: An internal auditor discovers a significant control deficiency during a field review. Which communication action should occur FIRST?
- Draft the final audit report immediately
- Discuss the finding with the process owner to validate facts (Correct answer)
- Escalate directly to the audit committee without delay
- Notify external regulators of the deficiency
Correct answer: Discuss the finding with the process owner to validate facts
Discussing findings with the process owner first ensures factual accuracy and gives management the opportunity to clarify or provide context before formal reporting.
Question 2: Which attribute of audit communication ensures that report recipients can clearly act on the information provided?
- Conciseness
- Actionability (Correct answer)
- Timeliness
- Confidentiality
Correct answer: Actionability
Actionability means findings and recommendations are presented in a way that enables stakeholders to take corrective steps.
Question 3: A CAE needs to maintain objectivity while presenting audit results to an executive who funds the audit department. Which approach BEST preserves independence?
- Soften findings to avoid conflict with the funding executive
- Present all findings factually regardless of the executive's preferences (Correct answer)
- Omit minor findings to maintain a positive relationship
- Delay the report until the executive reviews a draft
Correct answer: Present all findings factually regardless of the executive's preferences
Objectivity requires internal auditors to present findings factually without bias, regardless of the stakeholder's position or influence.
Question 4: When distributing an audit report containing sensitive findings, the CAE should PRIMARILY consider:
- The preferences of the process owner regarding distribution
- Established policies on report distribution and need-to-know (Correct answer)
- Ensuring all employees are aware of control weaknesses
- Minimizing distribution to protect the audit department's reputation
Correct answer: Established policies on report distribution and need-to-know
Report distribution should follow established organizational policies that balance transparency with appropriate confidentiality based on sensitivity.
Question 5: An audit team member disagrees with the CAE's conclusion in the draft report. According to IIA Standards, what is the APPROPRIATE resolution?
- The team member's view is automatically overridden by the CAE
- The disagreement should be documented and escalated to the board
- The CAE makes the final decision but the dissenting view may be documented (Correct answer)
- The engagement must be restarted with a new audit team
Correct answer: The CAE makes the final decision but the dissenting view may be documented
The CAE has final authority over audit conclusions, but IIA guidance allows dissenting opinions to be noted in the report or working papers.
Question 6: A stakeholder requests that the internal audit team share its working papers with an external party. The BEST course of action is to:
- Share the working papers immediately to maintain stakeholder trust
- Consult legal counsel and senior management before disclosure (Correct answer)
- Refuse all requests as working papers are always confidential
- Destroy the working papers to prevent unauthorized access
Correct answer: Consult legal counsel and senior management before disclosure
Disclosure of working papers to external parties requires legal and management consultation to protect confidentiality and organizational interests.
Question 7: Which practice BEST demonstrates effective upward communication between the internal audit function and the audit committee?
- Presenting only positive audit outcomes to maintain committee confidence
- Providing periodic, candid reports on audit plan progress and significant risks (Correct answer)
- Limiting communication to formal written reports submitted annually
- Routing all communications through management before reaching the committee
Correct answer: Providing periodic, candid reports on audit plan progress and significant risks
Effective upward communication includes regular, candid updates on audit activities, emerging risks, and resource constraints to support the audit committee's oversight role.
Certified Internal Auditor Communication & Stakeholder Relations 2
An internal auditor discovers a significant control deficiency during a field review.
Which communication action should occur FIRST?