Exam CISA topic 1 question 15 discussion

From my real life experience, working in Big 4's, External auditors leverage Internal Auditor's work.

This approach ensures that internal audit does not duplicate efforts unnecessarily. If the external audit team has already tested certain controls, internal audit can leverage their work while ensuring independence and alignment with internal objectives. This is a common best practice to optimize audit resources.

ISMS,QMS etc

leverage the work of external auditors, not the other way around

Since external audits are always performed, the results of those audits can be used for internal audits to reduce duplication of resources.

Keyword should be "high risk", not "cost effective"

One of the primary objectives of every audit program is to produce enough dependable evidence using internal auditors to reduce the financial burden of using external auditors.

As the question is taking about high-risk areas, the control would be tested by both teams. However, if it would have been a low-risk control, then the external auditor can rely on the IAs work or vice versa

A is the correct answer Generally, given the nature of internal and external audits, option A, "Leverage the work performed by external audit for the internal audit testing," is often the default choice, as external audits are typically more comprehensive and rigorous, and their findings are designed to be used by a broad range of stakeholders, including internal auditors. But again, this can depend on the specifics of the situation.

A: By leveraging the work performed by the external audit team, the internal audit team can reduce duplication of effort and focus their resources on areas that have not been adequately covered by the external auditors. This allows for more efficient use of resources and avoids unnecessary redundancy.

Using a prototyping approach in software development allows stakeholders to visualize and interact with a working model of the software early in the development process. This helps in conceptualizing and clarifying requirements, ensuring that the final product meets the needs and expectations of the users.

Requesting that the external audit team leverage the internal audit work is the most efficient approach to optimizing resources in this scenario. This approach allows for collaboration and coordination between the internal and external audit teams, reducing duplication of efforts and maximizing the use of available resources.

Your internal risk approach may be different then external auditors. In that case you can check an other risky area and depend on external auditors paper work for the same area. You may use different test of design approach from external audit for additional assurance. Answer is clearly A. External auditors may use internal audits finding, evidences or paper work for their own audit work (Eg: SOX). But you cant specifically request it and effect their independence, its at their own accord

I also thought it would be B

why not b

why not B