IIA Updated IIA-CIA-Part1 Exam Questions and Answers by abdulrahman

The chief audit executive (CAE) taking on a consultative role can appropriately coordinate and facilitate risk workshops for management. This task aligns with the advisory function of internal audit, where they support and facilitate the risk management process without directly setting the risk appetite or determining risk mitigation strategies, thereby maintaining their advisory and facilitative role without assuming management responsibilities.References: International Standards for the Professional Practice of Internal Auditing; guidance on internal audit's role in consulting.

If an internal auditor suspects fraud during an engagement, the expected action is to evaluate the suspected activities to determine whether a formal investigation is warranted. This step is crucial as it ensures that suspicions are substantiated before escalating the issue, thereby maintaining the integrity and objectivity of the internal audit process. This approach aligns with the IIA’s guidance on handling fraud, including assessing and responding to risks of fraud during audit engagements.References: The Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing

A control weakness in the context of internal control over purchasing might be seen in the process where department managers initiate purchase requests that must be approved by the plant superintendent. If the approval process is not robust, this could lead to conflicts of interest or lack of independent review, especially if the superintendent has significant influence or control, and there are no further checks or balances. This situation could potentially allow for inappropriate approvals without sufficient oversight, representing a control weakness.References: Internal control frameworks, such as COSO (Committee of Sponsoring Organizations of the Treadway Commission).

In the context of an initial public offering (IPO), the best description of the risk involved is "inherent risk." Inherent risk refers to the exposure inherent in the company's operations or industry without considering the effectiveness of any risk management measures. An IPO's inherent risks include market volatility, investor sentiment, regulatory changes, and economic factors that could affect the offering's success.References: Financial risk management literature and common usage in financial audits.