CGRC Audit Management 4 — Questions and Answers
Question 1: When preparing an audit report, the finding format that most effectively drives management action includes:
- Condition, criteria, cause, effect, and recommendation (Correct answer)
- Risk rating, timeline, auditor name, and department
- Test performed, sample size, population, and exception rate
- Assertion, evidence, conclusion, and sign-off
Correct answer: Condition, criteria, cause, effect, and recommendation
The five-element finding format (condition, criteria, cause, effect, recommendation) provides the complete context needed for management to understand and act on findings.
Question 2: Which risk assessment approach ranks risks by multiplying the likelihood of occurrence by the magnitude of impact?
- Qualitative risk ranking
- Quantitative risk scoring (Correct answer)
- Heat map analysis
- Risk-based audit planning matrix
Correct answer: Quantitative risk scoring
Quantitative risk scoring assigns numerical values to likelihood and impact and multiplies them to produce a risk score for prioritization.
Question 3: An audit committee's primary oversight responsibility related to internal audit includes:
- Approving individual audit workpapers
- Reviewing and approving the internal audit charter and annual audit plan (Correct answer)
- Selecting the external audit firm's engagement partner
- Setting the internal audit department's operational budget line items
Correct answer: Reviewing and approving the internal audit charter and annual audit plan
The audit committee provides governance oversight by approving the charter and plan, ensuring the audit function has appropriate scope and resources.
Question 4: Which scenario represents an impairment to auditor objectivity?
- An auditor uses prior-year workpapers as a starting reference
- An auditor previously managed the department now being audited (Correct answer)
- An auditor consults a subject-matter expert on a technical issue
- An auditor schedules the audit without advance notice to management
Correct answer: An auditor previously managed the department now being audited
An auditor who previously managed the area under review has a self-review threat that impairs their objectivity until sufficient time has passed.
Question 5: In continuous auditing, which technology enables real-time monitoring of transactions against predefined thresholds?
- Static data warehousing
- Automated control monitoring (ACM) tools (Correct answer)
- Manual exception reporting
- Periodic batch processing
Correct answer: Automated control monitoring (ACM) tools
Automated control monitoring tools evaluate transactions continuously against established rules and immediately flag exceptions for auditor review.
Question 6: When an auditee disagrees with an audit finding, the appropriate auditor response is to:
- Remove the finding from the report to avoid conflict
- Document management's response alongside the finding in the report (Correct answer)
- Escalate immediately to regulators
- Delay the report until agreement is reached
Correct answer: Document management's response alongside the finding in the report
Professional standards require that management's responses, including disagreements, be included in the audit report to provide a complete picture.
Question 7: Which concept describes the maximum dollar amount of misstatement that an auditor will accept without modifying the audit opinion?
- Audit risk threshold
- Materiality (Correct answer)
- Tolerable error
- Detection limit
Correct answer: Materiality
Materiality is the threshold above which misstatements are considered significant enough to influence the decisions of financial statement users.
CGRC Audit Management 4
When preparing an audit report, the finding format that most effectively drives management action includes: