According to the International Standards for the Professional Practice of Internal Auditing, particularly Standard 2420 - Quality of Communications, internal audit communications should be accurate, objective, clear, concise, constructive, complete, and timely. Ensuring that communications are relevant, logical, and free from errors is essential for maintaining the credibility and effectiveness of the internal audit function and for providing management with reliable information for decision-making. : Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2420 - Quality of Communications.
According to the International Standards for the Professional Practice of Internal Auditing (Standards) issued by The Institute of Internal Auditors (IIA), the Chief Audit Executive (CAE) must communicate and obtain approval from the board for significant changes to the audit plan. A corporate merger is a significant event that introduces emerging risks, necessitating an interim adjustment to the audit plan. The CAE's responsibility includes ensuring that the board is informed and approves the revised audit plan to address these new risks adequately. Reference: The Institute of Internal Auditors (IIA) Standard 2020 - Communication and Approval: "The chief audit executive must communicate the internal audit activity's plans and resource requirements, including significant interim changes, to senior management and the board for review and approval."
The request for new vendor information to be summarized weekly and for invoices to be flagged automatically in the processing system indicates the use of continuous auditing. Continuous auditing involves ongoing, real-time monitoring of transactions and controls, which allows for the early detection of anomalies or issues. IIA Reference: IIA Standard 2320: Analysis and Evaluation suggests that internal auditors should use appropriate technology to support their analysis. Continuous auditing tools are designed to monitor transactions continuously, enabling auditors to identify and address risks more proactively. The Practice Guide on Continuous Auditing outlines the benefits of real-time monitoring and how it can be integrated into the audit process to enhance the timeliness and relevance of audit results.
To measure the performance related to the quality of audit recommendations, the internal audit activity should focus on whether the audit findings were relevant and useful to management. This directly assesses the practical impact and value of the audit recommendations, ensuring that they address significant issues and assist management in improving operations and controls. References: = IIA's Practice Guide on Measuring Internal Audit Effectiveness and Efficiency.
Question 140
下列哪一項最不可能有助於確保在工作計畫中考慮風險？
Correct Answer: A
While discussing risks with the audit client can provide useful insights, it is the least structured method compared to using all available information from the risk-based plan, considering client efforts to manage risk, and reviewing prior risk assessments. These latter methods are more systematic and ensure that the audit work program is comprehensive and focused on relevant risks. Reference: = IIA Standard 2200 - Engagement Planning, IIA Practice Guide: "Developing the Audit Plan".
