The Professional Internal Auditor Flashcards

1
Q

Which professional designation created a guidance framework for internal auditors on their characteristics/qualities/attributes and the establishment of an internal audit activity?

A
  • The Certified Internal Auditors (CIA) designation
  • The code of ethics for internal auditors
  • The attribute standards
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The IACF distinguishes between what?

A

Competencies at various levels:
- namely chief audit executive
- senior internal auditor
- new internal audit staff

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which ten core competency areas for internal auditors identified in the IACF?

A
  • Professional ethics
  • Internal audit management
  • IPPF
  • Governance, risk and control
  • Business acumen
  • Communication
  • Persuasion and collaboration
  • Critical thinking
  • Internal audit delivery
  • Improvement and innovation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which regulatory body developed the code of ethics to guide the behaviour of internal audit professional?

A

The Institute of Internal Auditors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the purpose of the code of ethics>

A

To promote an ethical culture in the profession of internal auditing.
- To guide ethical behaviour of auditors
- To prevent unethical behaviour

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Finish the statement

Code of Ethics applies to all…

A

Individuals who render internal audit services as well as organisations that provide internal audit services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which essential components does the code of ethics includes?

A
  • Principles that are relevant to the profession and practice of internal auditing
  • Rules of conduct that describes behaviour norms expected of internal auditors. These rules are an aid to interpreting the principles into practical applications and are intended to guide the ethical conduct of internal auditors
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the consequences of non-adherence to the IIA’s code of ethics?

A

Suspension of IIA membership and retraction of IIA certification(s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which principles internal auditors are required to apply and uphold \?

A
  • Integrity
  • Objectivity
  • Confidentiality
  • Competency
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define integrity

A

Establishes trust and thus provides the basis for reliance on their judgement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Define objectivity

A

Internal auditors exhibit the highest level of professional objectivity in gathering evaluating, and communicating information about the activity or process being examined.
Internal auditors make a balances assessment of all relevant circumstances are not unduly influences by their own interests or by others in forming judgements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Discuss confidentiality

A

Internal auditors respect the value and ownership of information without appropriate authority unless there is a legal or professional obligation to do so.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Discuss competency

A

Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

True or false

Confidentiality is the foundation of all other three principles

A

False

Integrity is the foundation of all other three principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

In relation to the rules of conduct.

Discuss internal auditors integrity

A
  • shall perform their work with honesty, diligence and responsibility
  • shall observe the law and make disclosures expected by the law and the profession
  • shall not knowingly be a party to any illegal activity, or engage in acts that are discreditable to the profession of internal auditing or to the orgnisation
  • shall respect and contribute to the legitimate and ethical objectives of the organisation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In relation to the rules of conduct.

Discuss objectivity of internal auditors

A
  • shall not participate in any activity or relationships that may impair or be presumed to impair their unbiased assessment. Includes activities/relationships that may be in conflict with the interest of the organisation
  • shall not accept anything that may impair/presumed to impair their professional judgement
  • shall disclose all materials facts known to them, if not disclosed, may distort the reporting of activities under review
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

In relation to the rules of conduct.

Discuss the confidentiality of internal auditors

A
  • shall be prudent in the use and protection of information acquired in the course of their duties
  • shall not use information for any personal gain or any manner that would be contrary to the law or detrimental to the legitimate and ethical objectives of the organisation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

In context of rules of conduct.

Disclose competency of internal auditors

A
  • shall engage only in those services for which they have the necessary knowledge, skills, and experience
  • shall perform internal audit services in accordance with the international standards for the professional practice of internal auditing
  • shall continually improve their proficiency and the effectiveness and quality of their services
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Attribute standards focus on what?

A

The characteristics of the internal auditing activity as well as on the individuals who perform the internal audit engagement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Discuss 1000 - Purpose, Authority and responsibility

A

The purpose, authority and responsibility of the internal audit activity must be formally defined in an internal audit charter, consistent with the mission of internal audit and the mandatory elements of the IPPF.
The CAE must periodically review the internal audit charter and present it to senior management and the board for approval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How should 1000 be interpretated?

A

The internal audit charter is a formal document that defines the internal audit activity’s purpose, authority and responsibilty.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does the internal audit charter establishes?

A

The internal audit activity’s position within the organisation.
- The nature of the CAE’s functional reporting relationship with the board.
- Authorises access to records, personnel and physical properties relevant to the performance of engagements.
- Defines the scope of IAA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

True or False

Final approval of the internal audit charter resides with the audit committee

A

False

Final approval of the internal audit charter resides with the board

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Disclose 1000.A1

A

The nature of assurance services provided to the organisation must be defined in the internal audit charter.
If assurances are to be provided to parties outside the organisation, the nature of these assurances must be defined in the internal audit charter.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Annotate 1000. C1

A

The nature of consulting services must be defined in the internal audit charter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Who is responsible for drafting an internal audit charter?

A

The CAE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

State 1010 - Recognizing mandatory guidance in the internal audit charter

A

The CAE can make specific statement in the internal audit charter recognising the adherence to mandatory elements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

State 1100 - Independence and objectivity

A

The IAA must be independent, and IA must be objective in performing their work

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How can the CAE achieve the degree of independence necessary to effectively carry out the responsibilities of the IAS?

A

The CAE must have direct and unrestricted access to senior management and the board. This is achieved through a dual reporting relationship

30
Q

Discuss 1110 - Organisational independence

A

The CAE must report to a level within the org that allows the IAA to fulfil its responsibilities.
The CAE must confirm to the board, at least annually, the organisational independence of the IAA.

31
Q

Annotate 1110. A1

A

The IAA must be free from interference in determining the scope of internal auditing, performing work, and communicating results. The CAE must disclose such interference to the board and discuss the implications

32
Q

State 1111-Direct interaction with the board

A

The CAE must communicate and interact directly with the board

33
Q

Which standard number is CAE roles beyond internal auditing?

A

1112

34
Q

Interpret 1112

A

The CAE may be asked to take additional roles and responsibilities outside of internal auditing such as responsibility for compliance or risk management activities.

35
Q

Will the additional roles the CAE take may impair or impair the organisational independence of the IAA or the individual objectivity of the IA?

A

Yes

36
Q

What are the safeguards for standard 1112 ?

A

Oversight of activities, often undertaken by the board, to address these potential impairments.
The activities include:
- periodically evaluating reporting lines and responsibilities and developing alternative processes to obtain assurance related to the areas of additional responsibility

37
Q

State 1120 - Individual objectivity

A

IA must have an impartial, unbiased and avoid conflict of interest

38
Q

Disclose 1130 Impairment to independence or objectivity

A

If Independence or objectivity is impaired in fact or appearance, the details of the impairment must be disclosed to appropriate parties. The nature of the disclosure will depend upon the impairment.

39
Q

Interpret 1130 Impairment of independence or objectivity

A

If it happens that an IA is in an situation where an actual or potential impairment to independence or objectvity may be reasonable be inferred, or if they have questions about whether a situation constitutes an impairment to objectivity or independence, these facts should be reported to the CAE and they should immediately re-assign the IA

40
Q

State the scope of limitation of communication to the board, audit committee upon the IAA in relation to standard 1130

A
  • the scope defined in the charter
  • the accessing of records, personnel and physical properties relevant to performing engagement
  • approved engagement work schedules
  • approved staff plans and financial budget
41
Q

True or false

The concept of gifts or fee does not include promotional items such as pens, calendars that are available to general public and minimal value

A

True

42
Q

True or false

Its ethical for IA to accept a fee or gift

A

False

Its unethical for IA to accept a fee or gift as this may create an appearance that the IA is not objective.

43
Q

State standard 1130 A.1

A

IA must refrain from assessing specific operations for which they were previously responsible. Objectivity is presumed to be impaired if an IA provides assurance services for an activity for which they had responsibility within the previous year

44
Q

State 1130.A2

A

Assurance engagements for functions over which the CAE had responsibility must be oversee by a party outsIde the IAA

45
Q

Disclose 1130.A3

A

The IAA may provide assurance services where it had previously performed consulting services, provided the nature of the consulting did not impair objectivity and provided individual objectivity is managed when assigning resources to the engagement

46
Q

Annotate 1130.C1

A

IA may provide consulting services relating to operations for which they had previous responsibilities

47
Q

What is 1130.C2

A

If IA have potential impairments to independence or objectivity relating to proposed consulting services, disclosures must be made to the engagement client prior to accepting the engagement

48
Q

What is 1200 Proficiency and due professional care?

A

Engagements must be performed with proficiency and due professional care

49
Q

State 1210 Proficiency

A

IA must possess the knowledge, skills and other competencies needed to perform their individual responsibilities. The IAA collectively must possess or obtain the knowledge, skills and other competencies needed to perform its responsibilities

50
Q

What the knowledge, skills and other competencies needed by IA to perform their task with proficiency based on standard 1210 proficiency?

A
  • applying the standards
  • proficiency in accounting principles and techniques
  • knowledge to identify the indicators of fraud
  • knowledge of key IT risk and controls, and tecnhnology based audit techniques
  • an understanding of management principles
  • an appreciation of the fundamentals of accounting, economics, commercial law, tax, finance, quantitative methods, IT, risk management and fraud
  • skilled on dealing with people
  • understanding human relationships
  • able to communicate effectively
51
Q

State 1201.A1

A

The CAE must obtain competent advice and assistance if they IA’s lack the knowledge, skills or other competencies needed to perform all or part of the engagement

52
Q

Disclose 1210.A2

A

IA must have sufficient knowledge to evaluate the risk of fraud and the manner in which it is managed by the org, but not expected to have the expertise of a person whose primary responsibility is detecting and investigating fraud

53
Q

What is 1210.A3

A

IA must have sufficient knowledge of key IT risks and controls and available technogy- based audit techniques to perform their assigned work. However, not IA are expected to have the expertise of an IA who is an expert

54
Q

State 1210.C1

A

The CAE must decline the consulting engagement or obtain competent advice and assistance if the IA lack the knowledge, skills or other competencies needed to perform all or part of the engagement

55
Q

Disclose 1220 Due professional care

A

IA must apply the care and skills expected of a reasonably prudent and competent IA. “Due professional care” does not imply infallibility

56
Q

True or false

IA should be alert to intentional wrongdoings, errors and omissions. Based on standard 1220 due professional care

A

True

57
Q

What should IA considering when exercising due professional care

A
  • extent of work needed to achieve the engagement’s objectives
  • relative complexity, materiality, or significance of matters to which assurance procedures are applied
  • adequacy and effectiveness of governance, risk management, and control processes
  • probability of significant errors, fraud, or non-compliance
  • cost of assurance in relation to potential benefits
58
Q

State 1220.A2

A

In exercising due professional care, IA must consider the of technology based audit and other data analysis techniques

59
Q

Disclose 1220.A3

A

IA must be alert to the significant risks that might affect objectives, operations, or resources. However, assurance procedures alone, even when performed with due professional care, do no guarantee that all significant risks will be identified

60
Q

Discuss 1220.C1

A

IA must exercise due professional care during consulting engagement by considering the :
- needs and expectations of clients
- relative complexity and extent of work needed to achieve the engagement’s objectives
- cost of consulting engagement in relation to potential benefits

61
Q

Disclose 1230 Continuing professional development (CPD)

A

IA must enhance their knowledge, skills and other competencies through continuing professional development

62
Q

What does continuing professional development entail?

A

IA must continue their education to enhance and maintain their proficiency.

Continuing education may be obtained through membership of professional societies, attending conferences, seminars, courses, in-house training and research projects

63
Q

Annotate 1300 Quality assurance and improvemEnt programme (QAIP)

A

The CAE must develop and maintain a quality assurance and improvement programme that covers all aspects of the IAA

64
Q

State 1310 Requirements of the quality assurance and improvement programme

A

The quality assurance and improvement programme must include both internal and external assessments

65
Q

Discuss 1311 Internal Assessment

A

IA must include:
- on-going monitoring of the performance of the IAA
- periodic self-assessments or assessments by other persons within the org with sufficient knowledge of IA practices

66
Q

Discuss 1312 External assessments

A

External assessments must be conducted at least once every 5 years by a qualified, independent assessor team from outside the org. The CAE must discuss with the board:
- the form and frequency of external assessement
- the qualifications and independence of the external assessor or assessment team, including any potential conflict of interest.

67
Q

State 1320 Reporting on the quality assurance and improvement programme

A

The CAE must communicate the results of the quality assurance and improvement program to senior management and the board.
Disclosure should include:
- the scope and frequency of both the internal and external assessment
- the qualifications and independence of the assessor(s) or assessment teaam
- conclusion of assessors
- corrective action plans

68
Q

Interpret 1320 Reporting on the quality assurance and improvement programme

A

The quality of assurance and improvement program is established through discussions with senior management and board

69
Q

State 1321 Use of “Conforms to the International Standards for the professional Practices of IA”

A

Indicating that the IAA conforms with the International Standards for the professional Practices of IA is appropriate only if supported by the results of the quality assurance and improvement program

70
Q

State 1321 Use of “Conforms to the International Standards for the professional Practices of IA”

A

Indicating that the IAA conforms with the International Standards for the professional Practices of IA is appropriate only if supported by the results of the quality assurance and improvement program

71
Q

Disclose 1322 Disclosure of non-conformance

A

When non-conformance with the code of ethics or the standards impacts the overall scope or operation of the IAA, the CAE must disclose the non-conformance and the impact to senior management and the board