IIA-CIA-Part1 Certified Internal Auditor - Part 1, The Internal Audit Activity's Role in Governance, Risk, and Control

Loading demo links...

Showing 4–6 of 20 questions

Question 4 (Volume A)

Which of the following is an appropriate role for the board in governance?

Select an option, then click Submit answer.

  • Preparing written organizational policies that relate to compliance with laws, regulations, ethics, and conflicts of interest.

  • Ensuring that financial statements are understandable, transparent, and reliable.

  • Assisting the internal audit activity in performing annual reviews of governance.

  • Working with the organization's attorneys to develop a strategy regarding current litigation, pending litigation, or regulatory proceedings governance.

Question 5 (Volume B)

The best reason for separating the cash-receiving function from the related record-keeping function is to:

Select an option, then click Submit answer.

  • Segregate cash payments from cash receipts.

  • Provide accountability for cash received.

  • Minimize misappropriations in cash receipts.

  • Improve physical security over the cash-receiving function.

Question 6 (Volume B)

The chief audit executive for an organization has just completed a risk assessment process, identified the areas with the highest risk, and assigned an audit priority to each. Which of the following statements is true and consistent with the International Professional Practices Framework?

I. Items should be ranked in the order of quantifiable dollar exposure to the organization.

II. The audit priorities should be in order of major control deficiencies.

III. The risk assessment, though quantified, is the result of professional judgments about both exposures and probability of occurrences.

Select an option, then click Submit answer.

  • I only

  • III only

  • II and III only

  • I, II, and III.

  • Items should be ranked in the order of quantifiable dollar exposure to the organization.
    II. The audit priorities should be in order of major control deficiencies.
    III. The risk assessment, though quantified, is the result of professional judgments about both exposures and probability of occurrences.