IIA Updated IIA-CIA-Part1 Exam Questions and Answers by aiza

A responsibility of the internal audit activity as it relates to risk and risk management is evaluating and suggesting improvements to the risk management process. This role includes assessing the adequacy and effectiveness of the process in identifying, analyzing, and managing risks, as well as recommending improvements based on audit findings.References: IIA Standards for the Professional Practice of Internal Auditing related to risk management.

To manage the impairment caused by an internal auditor's personal relationship affecting audit impartiality, a functional audit committee should be utilized. The audit committee is responsible for ensuring the independence and objectivity of the internal audit function. This committee can take actions such as reassigning the audit task, reviewing the affected audit work, or instituting additional oversight for audits in that area.References: The IIA's Standards on objectivity and conflicts of interest (specifically standards relating to managing impairments to independence and objectivity).

An appropriate disclosure of potential nonconformance with the Standards would be that an external assessment of the internal audit activity was last performed six years ago. According to IIA standards, external assessments must be conducted at least once every five years. Failing to perform an external assessment within this timeframe constitutes nonconformance with the Standards.References: IIA Standard 1312 - External Assessments, which requires that external quality assessments be performed at least once every five years to ensure conformity with the Standards.

When faced with a court order that may involve sharing confidential information, it is appropriate and prudent for the chief audit executive (CAE) to consult with legal counsel. This step ensures that the CAE understands the legal obligations and constraints before disclosing audit reports and workpapers that contain sensitive customer information, balancing legal compliance with the duty to protect confidentiality.References: Institute of Internal Auditors (IIA) - Guidelines on Handling Legal and Ethical Issues