Which group is charged with overseeing the establishment administration and evaluation of the processes of risk management and control?

What is Internal Audit?

Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization’s operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

Show

Performed by professionals with an in-depth understanding of the business culture, systems, and processes, the internal audit activity provides assurance that internal controls in place are adequate to mitigate the risks, governance processes are effective and efficient, and organizational goals and objectives are met.

Evaluating emerging technologies. Analyzing opportunities. Examining global issues. Assessing risks, controls, ethics, quality, economy, and efficiency. Assuring that controls in place are adequate to mitigate the risks. Communicating information and opinions with clarity and accuracy. Such diversity gives internal auditors a broad perspective on the organization. And that, in turn, makes internal auditors a valuable resource to executive management and boards of directors in accomplishing overall goals and objectives, as well as in strengthening internal controls and organizational governance.

Seems like a lot to ask from one resource? Maybe for some, but for internal auditors — it’s all in a day’s work.

Definition of Internal Auditing

According to the Definition of Internal Auditing in The IIA's International Professional Practices Framework (IPPF), internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

Internal Audit Profession Resources

For newcomers to the profession of internal auditing as well as experienced practitioners who want to promote the profession and its role in the success of an organization, the following resources are ideal for elevating the profession, enhancing professionalism, and building awareness.

For more information, contact .

The Basics

All in a Day's Work
A look at the varied roles of internal auditors

Adding Value Across the Board
How internal auditing contributes to strong corporate governance

Frequently Asked Questions About the Internal Audit Profession

For Governing Bodies

Value Proposition: Internal Auditing's Value to Stakeholders

The Value of Internal Auditing for Stakeholders
How internal auditing provides assurance, insight, and objectivity to audit committees and boards of directors

The Audit Committee: Internal Audit Oversight
Implementing best practices and high standards

Standards and Professionalism

Authoritative Guidance
Overview of the IPPF and its mandatory and strongly recommended components

What Does it Take to Be a Professional?
Internal auditing related to professionalism in ethics, standards, and certification

The chief executive officer wants to know whether the purchasing function is properly meeting its charge to "purchase the right materials at the right time in the right quantities." Which of the following types of engagements addresses this request?A financial engagement relating to the purchasing department. An operational engagement relating to the purchasing function. A compliance engagement relating to the purchasing function.A full-scope engagement relating to the manufacturing operation.

An operational engagement relating to the purchasing function.

The primary difference between operational engagements and financial engagements is that, in the former, the internal auditorsAre not concerned with whether the client entity is generating information in compliance with financial accounting standards.Are seeking to help management use resources in the most effective manner possible. Start with the financial statements of the client entity and work backward to the basic processes involved in producing them.Can use analytical skills and tools that are not necessary in financial engagements.

Are seeking to help management use resources in the most effective manner possible.

During an operational engagement, the internal auditors compare the current staffing of a department with established industry standards to Identify bogus employees on the department's payroll.Assess the current performance of the department and make appropriate recommendations for improvement.Evaluate the adequacy of the established internal controls for the department.Determine whether the department has complied with all lass and regulations governing its personnel.

Assess the current performance of the department and make appropriate recommendations for improvement.

Which group is charged with overseeing the establishment, administration, and evaluation of the processes of risk management and control?Operating managers.Internal auditors.External auditors.Senior management.

Senior management.

Which of the following statements about control self-assessment (CSA) is false?CSA is usually an informal and undocumented process.In its purest form, CSA integrates business objectives and risks with control processes.CSA is also known as control/risk self-assessment.Most implemented CSA programs share some key features and goals.

CSA is usually an informal and undocumented process.

The contractor could be charging for the use of equipment not used in the construction.

A company would like to contract for janitorial services for 1 year with 4 option years. The specifications require the potential contractor to perform certain cleaning services at specified intervals. Which of the following is the best contract type for this requirement?Cost-reimbursable.Indefinite delivery.Fixed-price.Time-and-materials.

Fixed-price.

An internal auditor is conducting an audit of environmental protection and alarm devices. Which is the most significant objective of such an assignment? To determine whetherThe devices are installed and operating properly. The costs of the devices were properly recorded.The device specification documents ate complete.Acquisitions and disposals are properly authorized.

The devices are installed and operating properly.

Which of the following does the internal auditor not have to review as thoroughly in a lump-sum contract?Progressive payments.Adjustments to labor costs.Work completed in accordance with the contract.Incentives associated with the contract.

Work completed in accordance with the contract.

Total quality management in a manufacturing environment is best exemplified by Identifying and reworking production defects before sale.Designing the product to minimize defects.Performing inspections to isolate defects as early as possible.Making machine adjustments periodically to reduce defects.

Designing the product to minimize defects.

Which forms of control self-assessment assume that managers and members of work teams possess an understanding of risk and control concepts and use those concepts in communications?The self-certification approach.The self-certification approach and facilitated approach.The self-certification approach and questionnaire approach.All self-assessment programs.

All self-assessment programs.

Which of the following statements about TQM is false?This approach can increase revenues and decrease costs significantly.TQM is a comprehensive approach to quality.TQM begins with internal suppliers' requirements.TQM concepts are applicable to the operations of the internal audit activity itself.

TQM begins with internal suppliers' requirements.

TQM is the continuous pursuit of quality in every aspect of organizational activities through a number of goals. Which of the following is not one of those goals?A philosophy of doing it right the first time.Promotion of individual work.Employee training and empowerment.Improvement of processes.

Promotion of individual work.

An internal audit team is performing a due diligence audit to assess plans for a potential merger/acquisition. Which of the following would be the least valid reason for a company to merge with or acquire another company?To diversify risk.To respond to government policy.To reduce labor costs. To increase stock prices.

To increase stock prices.

An evaluation of the merit of lawsuits currently filed against the acquiree.

The reliability and integrity of all critical information of an organization, regardless of the media in which the information is stored, is the responsibility of Shareholders.IT department.Management.All employees.

Management.

Freedom from monitoring best definesPersonal privacy.Privacy of space. Privacy of communication.Privacy of information.

Privacy of communication.

All of the answers are correct.

Using the balanced scorecard approach, an organization evaluates managerial performance based onA single ultimate measure of operating results, such as residual income.Multiple financial and nonfinancial measures.Multiple nonfinancial measures only.Multiple financial measures only.

Multiple financial and nonfinancial measures.

Process engagement.

Which type of engagement attempts to measure the accomplishment and relative success of undertaking?Program-results engagement.Privacy engagement.Process engagement.Compliance engagement.

Program-results engagement.

Discipline of employee may be limited by all of the following exceptWhistleblower laws.A requirement to report certain employee violations to a governmental entity.Union contracts.Exceptions to the employee-at-will doctrine.

A requirement to report certain employee violations to a governmental entity.

Compliance programs most directly assist organizations by doing which of the following?1. Developing a plan for business continuity management.2. Determining director and officer liability.3. Planning for disaster recovery.1 only2 only1 and 2 only.1, 2, and 3.

2 only

Compliance standards should be straightforward and reasonably capable of reducing the prospect of criminal conduct.

An on-site ombudsperson, backed by a nonretaliation policy.

What is the role of a chief audit executive CAE with regard to an inspection by a regulator?

The internal audit activity is led by the chief audit executive (CAE). The CAE delineates the scope of activities, authority, and independence for internal auditing in a written charter that is approved by the audit committee.

Which of the following is normally a responsibility of the audit committee with regard to the internal?

Which of the following is normally a responsibility of the committee with regard to the internal audit activity? Approval of the selection and dismissal of the chief audit executive.

What is the role of audit committee?

The primary purpose of a company's audit committee is to provide oversight of the financial reporting process, the audit process, the company's system of internal controls and compliance with laws and regulations.

Which of the following is the most important benefit to management of the establishment of an internal auditing department?

The most important benefit of an internal auditing activity to management is assurance that the organization is complying with legal requirements.