IIA Updated IIA-CIA-Part1 Exam Questions and Answers by arvin

If a new internal auditor suspects fraud, the appropriate action is to document supporting information and recommend an investigation to the appropriate audit management, such as the chief audit executive (CAE). This approach maintains the auditor's objectivity and ensures that suspicions of fraud are handled by following the proper channels and procedures established within the organization for such matters.References: IIA guidance on fraud and the auditor's role in fraud detection, which emphasizes the importance of documenting evidence and escalating fraud concerns through proper management channels.

Under the circumstances described, the type of fraud most likely to occur is skimming. Skimming involves stealing cash before it is recorded on the organization’s books. Since receipts were issued only upon request and the inventory manager had control over collecting and depositing payments, there is an opportunity for undetected theft of cash payments.References: Common types of fraud in cash handling environments, as outlined in fraud detection and prevention resources by the IIA.

The most effective risk management strategy for a manufacturer experiencing regular fluctuations in the price of electrical power, which impacts the bottom line, would be to use a forward contract for bulk power purchases. This strategy allows the manufacturer to lock in power prices for a future period, thus reducing the risk associated with price volatility and providing more predictable cost planning.References: Risk management strategies in operations and finance, as discussed in business management and internal auditing literature, which advocate using financial instruments like forward contracts to hedge against price fluctuations.

The statement that articulating measurable objectives is part of internal control is true. A system of internal control is designed to help an organization achieve its objectives, and these objectives need to be clearly stated and measurable to effectively assess and control risks related to them.References: COSO Framework for Internal Control, which emphasizes the importance of clear, measurable objectives in effective internal control systems.