IIA Updated IIA-CIA-Part1 Exam Questions and Answers by gloria

The chief audit executive (CAE) best demonstrates the organizational independence of the internal audit activity by providing the board with an annual budget for approval. This action emphasizes the independence from management by ensuring the internal audit budget and resource allocations are directly overseen by the board, thus maintaining an independent status within the organization.References: IIA Standard 1110 - Organizational Independence

The directive that should concern the chief audit executive (CAE) the most is that internal auditors shall perform risk management activities. While internal auditors can assess and provide assurance on risk management processes, taking on the role of performing risk management activities can impair their objectivity and independence. Risk management is a management responsibility, and if internal auditors are involved in these activities, it could lead to conflicts of interest and compromise their ability to provide independent assurance.

References:

The IIA Standards: Standard 1112 – Chief Audit Executive Roles Beyond Internal Auditing: "If the chief audit executive has or is expected to have roles and/or responsibilities that fall outside of internal auditing, safeguards must be in place to limit impairments to independence or objectivity."

The IIA Practice Guide: "Independence and Objectivity": Discusses the importance of maintaining independence by avoiding operational responsibilities like risk management.

Management's decision to set a specific price below which liquid fuel shall not be sold, but instead stored, represents Risk avoidance. This approach involves eliminating the risk entirely by avoiding the activity that generates the risk. In this scenario, by deciding not to sell fuel below a certain price, management avoids the risk of losses due to price fluctuations.

References:

ISO 31000: Risk Management Guidelines.

COSO ERM Framework.

According to the IIA Standards, internal auditors must have sufficient knowledge to evaluate the risk of fraud and the manner in which IT is managed. This includes understanding their organization's IT governance, risk, and control processes (Option D). Standard 1210.A3 specifies that internal auditors must have sufficient knowledge of key information technology risks and controls and available technology-based audit techniques to perform their assigned work. This ensures that auditors can effectively assess and contribute to the improvement of the organization's IT governance and control environment.References:

IIA Standards, Standard 1210.A3: Proficiency - Technology-based Audit Techniques

IIA's International Professional Practices Framework (IPPF)