Certified Internal Auditor Quality Control & Assurance 4 — Questions and Answers
Question 1: According to IIA Standards, which of the following individuals would be LEAST appropriate to lead an external quality assessment of an internal audit activity?
- A CIA-certified consultant from a professional services firm
- A CAE from a non-competing organization in a different industry
- A partner from the organization's external audit firm who audits the financial statements (Correct answer)
- A retired CAE with no current financial interest in the organization
Correct answer: A partner from the organization's external audit firm who audits the financial statements
The external financial statement auditor has a financial relationship with the organization, which compromises the independence required of an external quality assessor.
Question 2: During a QAIP review, an internal auditor notes that engagement objectives were not clearly linked to the risks identified in the planning phase. This finding MOST likely indicates a deficiency in:
- Audit report formatting standards
- Engagement planning quality controls (Correct answer)
- Workpaper retention policies
- External assessment procedures
Correct answer: Engagement planning quality controls
Failure to align engagement objectives with identified risks reflects a weakness in engagement planning quality controls, a core QAIP component.
Question 3: An internal audit activity benchmarks its performance against industry peers as part of its QAIP. This practice PRIMARILY helps the activity:
- Justify its budget to senior management
- Identify best practices and performance gaps relative to comparable audit functions (Correct answer)
- Replace the need for an external quality assessment
- Satisfy regulatory reporting requirements
Correct answer: Identify best practices and performance gaps relative to comparable audit functions
Benchmarking against peers identifies best practices and highlights performance gaps, helping the activity continuously improve its operations.
Question 4: Which statement BEST describes the relationship between the QAIP and internal audit independence?
- QAIP results can substitute for formal independence declarations
- A robust QAIP helps demonstrate that the internal audit activity operates with objectivity and professionalism (Correct answer)
- Independence is evaluated only during external assessments, not through QAIP
- QAIP focuses solely on technical quality, not independence or ethics
Correct answer: A robust QAIP helps demonstrate that the internal audit activity operates with objectivity and professionalism
A well-functioning QAIP provides evidence that the internal audit activity maintains the independence and objectivity required by the IIA Standards.
Question 5: A newly appointed CAE finds no documentation of any QAIP activities in the past five years. The MOST immediate action the CAE should take is to:
- Terminate all current audit engagements until QAIP is established
- Conduct an external assessment before performing any further audits
- Develop and implement a QAIP, starting with a baseline self-assessment (Correct answer)
- Disclose the absence of QAIP to the organization's shareholders
Correct answer: Develop and implement a QAIP, starting with a baseline self-assessment
The CAE should promptly establish a QAIP by beginning with a self-assessment to understand the current state and then build out ongoing monitoring and external assessment processes.
Question 6: In the context of internal audit quality, 'conformance' with the IIA Standards is best understood as:
- Achieving a perfect score on all assessment criteria
- Having policies and practices that meet the requirements of the Standards in substance (Correct answer)
- Receiving a passing grade on a written examination administered by the IIA
- Complying with local laws that incorporate IIA Standards by reference
Correct answer: Having policies and practices that meet the requirements of the Standards in substance
Conformance means the internal audit activity's policies and practices substantively satisfy the requirements of the IIA Standards, not necessarily perfect compliance on every point.
Question 7: Which of the following QAIP components provides the MOST objective evaluation of the internal audit activity?
- CAE self-declaration of conformance
- Peer reviews conducted by CAEs from similar organizations
- Engagement-level supervisory reviews
- External assessment by an independent, qualified assessor (Correct answer)
Correct answer: External assessment by an independent, qualified assessor
An external assessment by a qualified, independent assessor provides the most objective evaluation because it is free from internal bias and organizational familiarity.
Certified Internal Auditor Quality Control & Assurance 4
According to IIA Standards, which of the following individuals would be LEAST appropriate to lead an external quality assessment of an internal audit activity?