IIA IIA-CIA-Part2 CIA Exam Part Two: Practice of Internal Auditing Online Training
IIA IIA-CIA-Part2 Online Training
The questions for IIA-CIA-Part2 were last updated at Jan 28,2025.
- Exam Code: IIA-CIA-Part2
- Exam Name: CIA Exam Part Two: Practice of Internal Auditing
- Certification Provider: IIA
- Latest update: Jan 28,2025
An organization’s board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process.
According to IIA guidance, which of the following roles should the CAE not undertake?
- A . Manage and coordinate risk management processes.
- B . Audit risk management processes.
- C . Become involved in risk oversight committees, monitoring activities, and status reporting.
- D . Accept management’s responsibility for risk management without board approval.
An organization’s board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process.
According to IIA guidance, which of the following roles should the CAE not undertake?
- A . Manage and coordinate risk management processes.
- B . Audit risk management processes.
- C . Become involved in risk oversight committees, monitoring activities, and status reporting.
- D . Accept management’s responsibility for risk management without board approval.
An organization’s board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process.
According to IIA guidance, which of the following roles should the CAE not undertake?
- A . Manage and coordinate risk management processes.
- B . Audit risk management processes.
- C . Become involved in risk oversight committees, monitoring activities, and status reporting.
- D . Accept management’s responsibility for risk management without board approval.
An organization’s board would like to establish a formal risk management function and has asked the chief audit executive (CAE) to be involved in the process.
According to IIA guidance, which of the following roles should the CAE not undertake?
- A . Manage and coordinate risk management processes.
- B . Audit risk management processes.
- C . Become involved in risk oversight committees, monitoring activities, and status reporting.
- D . Accept management’s responsibility for risk management without board approval.
Which of the following should be the focus of the effect section of the preliminary observations document?
- A . Residual risk
- B . Inherent risk
- C . Compensating controls
- D . Control activities
An internal auditor completed a review of expenses related to the launch of a new project. The auditor sampled 45 transactions approved by a senior project manager and identified 30 with questionable vendor documentation.
Which of the following is the most appropriate conclusion for the auditor to include in the audit report?
- A . The organization incurred excessive cost overruns that resulted in significant financial and legal risk to the project.
- B . The organization experienced a potential conflict of interest
- C . The organization had weaknesses in its review process which allowed questionable transactions with some vendors
- D . The organization allowed the project to launch without assurance that all transactions were regularly approved
During a consulting engagement an internal auditor wants to determine whether all principal stakeholders are involved in a project.
Which tool should the auditor use?
- A . RACI (responsible, accountable, consult and inform) chart
- B . Flowchart
- C . SWOT {strengths. weaknesses opportunities, and threats) analysis
- D . Workflow analysis
Which of the following would not be a typical activity for the chief audit executive to perform following an audit engagement?
- A . Report follow-up activities to senior management.
- B . Implement follow-up procedures to evaluate residual risk.
- C . Determine the costs of implementing the recommendations.
- D . Evaluate the extent of improvements.
According to IIA guidance, which of the following reflects a characteristic of sufficient and reliable information?
- A . The establishment of an audit approach and documentation system
- B . The standardization of workpaper terminology and notations
- C . The ability to reach consistent audit conclusions regardless of who performs the audit
- D . The application of documentation standards m an appropriate and consistent manner