Certified Internal Auditor Communication & Stakeholder Relations 5 — Questions and Answers
Question 1: Which IIA Standard directly governs the quality and content of audit communications?
- Standard 1100 – Independence and Objectivity
- Standard 2400 – Communicating Results (Correct answer)
- Standard 2200 – Engagement Planning
- Standard 1300 – Quality Assurance and Improvement Program
Correct answer: Standard 2400 – Communicating Results
IIA Standard 2400 specifically addresses requirements for communicating engagement results, including accuracy, clarity, conciseness, and timeliness.
Question 2: A CAE discovers that a prior audit report contained a material factual error. The APPROPRIATE action is to:
- Ignore the error if no one has complained about the report
- Issue a corrected communication to all original recipients promptly (Correct answer)
- Quietly correct working papers without notifying stakeholders
- Wait until the next engagement cycle to address the error
Correct answer: Issue a corrected communication to all original recipients promptly
IIA Standards require that material errors in audit communications be corrected and a revised report distributed to all who received the original.
Question 3: Which approach BEST supports effective communication with geographically dispersed audit stakeholders?
- Limiting all communication to in-person meetings
- Using a combination of virtual meetings, written updates, and collaborative platforms (Correct answer)
- Delegating all stakeholder communication to a single team member
- Reducing the frequency of stakeholder updates to minimize disruption
Correct answer: Using a combination of virtual meetings, written updates, and collaborative platforms
A multimodal communication approach ensures consistent, timely engagement with stakeholders regardless of geographic location.
Question 4: When an audit engagement identifies a potential fraud, the auditor's communication responsibility FIRST involves:
- Publicly disclosing the fraud to deter future misconduct
- Notifying appropriate levels of management and the audit committee per established protocols (Correct answer)
- Contacting law enforcement before informing internal stakeholders
- Completing the full audit cycle before communicating any fraud concerns
Correct answer: Notifying appropriate levels of management and the audit committee per established protocols
Potential fraud requires immediate notification to appropriate management levels and the audit committee in accordance with the organization's fraud response protocols.
Question 5: How does the principle of 'completeness' apply to audit communications?
- Every working paper must be included in the final report
- All information necessary for the recipient to understand findings must be presented without omission (Correct answer)
- Reports must document every transaction tested during the engagement
- Audit reports must include opinions on all risks in the organization
Correct answer: All information necessary for the recipient to understand findings must be presented without omission
Completeness requires that audit communications include all facts, context, and supporting information needed for stakeholders to understand and act on findings.
Question 6: A newly appointed audit committee chair asks the CAE to explain the role of internal audit in the organization. The MOST important relationship to emphasize is:
- The audit team's role in preparing financial statements
- The functional reporting line to the audit committee and administrative reporting to management (Correct answer)
- The CAE's authority to override management decisions on control issues
- Internal audit's role as an extension of the external audit firm
Correct answer: The functional reporting line to the audit committee and administrative reporting to management
The dual reporting structure—functional to the audit committee and administrative to management—is fundamental to internal audit independence and effective governance.
Question 7: Which factor is MOST likely to undermine the credibility of an audit report with stakeholders?
- Using a standardized report template across all engagements
- Including factual errors or inconsistencies in the report's findings (Correct answer)
- Distributing the report to multiple organizational levels
- Recommending corrective actions that require significant investment
Correct answer: Including factual errors or inconsistencies in the report's findings
Factual errors or inconsistencies in a report immediately damage the audit team's credibility and reduce stakeholder confidence in the audit function.
Certified Internal Auditor Communication & Stakeholder Relations 5
Which IIA Standard directly governs the quality and content of audit communications?