IIA Updated IIA-CIA-Part1 Exam Questions and Answers by bruce

Strategic objectives are prerequisites to establishing internal controls. This is because internal controls are designed to ensure that the actions taken by an organization align with its strategic objectives, helping to manage risks that could impede the organization from achieving these goals.References: COSO Framework and IIA guidance on internal controls.

The internal audit activity can be considered a type of governance control. Governance controls are those that are designed to ensure that the overall direction, administration, and control of an organization are maintained. The internal audit provides assurance on the effectiveness of governance, risk management, and internal controls.References: The IIA's guidance on the role of internal auditing in enterprise-wide risk management.

According to the IIA guidance on using the maturity model for assessing an organization's risk management program, a key activity to examine is "Monitor and Review." This element evaluates how well the organization continues to monitor its risk environment and reviews the effectiveness of risk management strategies over time. It is crucial for ensuring that risk management adapts to changes and continues to align with organizational objectives.References: Institute of Internal Auditors (IIA) - Guidance on Risk Management Maturity Models

The internal auditor's failure to identify the origins of a significant control issue before concluding the engagement suggests a lack of critical thinking skills. Critical thinking involves analyzing and evaluating an issue thoroughly to understand its root causes before forming a judgment. Improving this skill would enhance the auditor's ability to conduct deeper analyses and provide more valuable insights in audit reports.References: Institute of Internal Auditors (IIA) - Competency Framework for Internal Auditors