Exam IIA-CIA-Part2 topic 4 question 40 discussion

Actual exam question from IIA's IIA-CIA-Part2

Question #: 40
Topic #: 4

Management requested the chief audit executive (CAE) to include an audit of the organization's health and safety program in next year's annual audit plan.
However, the internal audit department has no expertise in this area. Which of the following would be the most appropriate action by the CAE?

A. With management's agreement, amend the scope of the audit to ensure that areas examined do not require specialized knowledge and expertise.
B. Meet with management to explain that the audit cannot be undertaken and discuss alternative strategies that can be implemented until internal audit can develop its capability in the area.
C. Accept the request provided management has conducted a thorough risk assessment prior to the engagement to help guide the audit.
D. Advise management that compliance audits of this type should only be conducted by the corresponding regulatory agency to ensure independence.

Show Suggested Answer

Suggested Answer: B 🗳️

by Sangy_jo at July 29, 2021, 1:19 p.m.

Comments

Submit Cancel

balqis32

10 months, 2 weeks ago

why not c

upvoted 1 times

...

KonradK

3 years ago

This would not be the consulting engagement as it is just a request from the management to include the review in the audit plan. IA cannot agree with management that if something is not comfortable for IA then certain processes are excluded from the engagement because IA don't have specialists within the department or entire IA lack knowledge in the certain topic.

upvoted 1 times

...

Sangy_jo

3 years ago

why not A

upvoted 1 times

John1237

2 years, 6 months ago

Assurance must be given regarding the containment of health and safety risk. In addition, management's expectations must be met.

upvoted 1 times

...