Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
Who is responsible for ensuring internal auditors continuing professional development*
Introduction:
Continuing Professional Development (CPD) is essential for internal auditors to maintain and enhance their skills and knowledge.
Responsibility for CPD:
While the organization and CAE provide support and resources, the primary responsibility for ensuring CPD rests with the individual internal auditors.
Options Analysis:
Option A: Individual internal auditors are responsible for their own CPD.
Option B: The CAE facilitates opportunities for CPD but is not solely responsible.
Option C: The board oversees overall governance and strategy but not individual CPD.
Option D: Engagement supervisors support auditors in their roles but do not manage their CPD.
Conclusion:
Individual internal auditors are responsible for ensuring their own continuing professional development.
IIA's Continuing Professional Education Requirements
An internal audit activity has to confirm the validity of the activities reported by a grantee that received a chantable contribution from the organization Which of the following methods would best help meet this objective?
Introduction:
When verifying the validity of activities reported by a grantee, it is essential to gather evidence that the project was executed as intended and within the defined scope.
Effective Verification Methods:
A site visit allows the auditor to observe firsthand the activities and projects funded by the grant, ensuring they align with the grant's objectives and scope.
Options Analysis:
Option A: Visiting the grantee provides direct evidence of the project execution and alignment with the grant scope.
Option B: Verifying the final report against the initial budget request ensures financial compliance but does not confirm actual project activities.
Option C: Reconciling general ledger accounts verifies financial records but not the execution of activities.
Option D: Interviewing corporate affairs employees provides insight but not direct evidence of project execution.
Conclusion:
The best method to confirm the validity of the activities reported by a grantee is to visit the grantee and assess whether the project execution aligns with the defined grant scope.
Internal Audit Standards and Practice Guides .
At a conference an internal auditor presented a new computer-assisted audit technique developed by his organization The presentation included sample data derived from performing audit engagements for the organization. Travel costs were paid by the conference organizers and the trip was approved by the chief audit executive (CAE). However, neither management nor the CAE was aware that the internal auditor would be making a presentation based on work completed for the organization According to IIA guidance, which of the following statements is most relevant regarding the actions of the auditor?
Understanding Confidentiality: According to the IIA Code of Ethics, internal auditors are required to respect the value and ownership of information they receive and not disclose information without appropriate authority unless there is a legal or professional obligation to do so.
Presentation Details: In this scenario, the internal auditor presented sample data derived from audit engagements performed for the organization. Even though the travel costs were covered by the conference organizers and the trip was approved by the CAE, neither the CAE nor management was aware of the specific content of the presentation.
Violation of Confidentiality: By disclosing information related to the organization's audit engagements without prior approval from management or the CAE, the auditor breached the confidentiality principle. The auditor should have sought permission before using and presenting any material related to the organization's internal operations.
IIA Standards: Standard 1310 -- Requirements of the Quality Assurance and Improvement Program -- states that internal auditors must adhere to the IIA's Code of Ethics and Standards. This includes maintaining confidentiality and obtaining necessary approvals before disclosing any organizational information.
Reference:
The principle of confidentiality is clearly violated when information is shared without proper authorization, regardless of the perceived impact on the organization. The IIA Code of Ethics emphasizes the importance of obtaining appropriate permissions to prevent unauthorized disclosures.
Which of the following methods is most closely associated to year over year trends?
Introduction:
Horizontal analysis involves comparing financial data across multiple periods to identify trends and patterns over time.
Year-over-Year Trends:
This method helps in understanding changes in financial performance and position year-over-year.
Options Analysis:
Option A: Horizontal analysis is directly related to comparing data year-over-year.
Option B: Vertical analysis involves comparing items on a financial statement as a percentage of a base figure within the same period.
Option C: Common-size analysis is a type of vertical analysis where all items are expressed as a percentage of a common base.
Option D: Ratio analysis evaluates relationships between different financial statement items but is not primarily focused on year-over-year trends.
Conclusion:
Horizontal analysis is most closely associated with year-over-year trends as it involves reviewing financial data across periods.
Financial Analysis and Reporting Guidelines
When is an organic organizational structure likely to be more successful than a mechanistic organizational structure?
An organic organizational structure is more flexible and adaptive compared to a mechanistic structure. It is characterized by less formalization, decentralized decision-making, and a greater reliance on lateral communication. This type of structure is beneficial in environments that are dynamic and uncertain, such as when an organization faces strong political and social pressures. The flexibility of an organic structure allows the organization to respond more effectively to external changes and pressures.
150 questions covering all exam domains, starting from $20
Exam domains verified against: Official IIA IIA-CHAL-QISA exam guide, last checked September 2026.
Candidates are tested on foundations of internal auditing, independence and objectivity, proficiency and due professional care, and the quality assurance and improvement program. The section covers organizational governance and corporate social responsibility and requires candidates to interpret fraud risks and types of fraud to determine whether special consideration is needed.
Sample question from this domain above: Q1
Candidates demonstrate knowledge of policies and procedures for planning, organizing, directing, and monitoring internal audit operations, including resourcing and staffing. The section covers engagement planning, objective setting, scope determination, and communicating engagement outcomes.
This domain covers strategic planning, organizational configuration structures, and business acumen needed for internal auditing. Topics include financial and managerial accounting, cost analysis for decision-making, and assessing the risk and control implications of organizational structures.
Common questions about the exam itself
