IIA-IAP Exam Questions & Answers

Comprehensive and Detailed Step-by-Step Explanation:

Address Matches an Employee's Residence: This is a strong indicator of fraud, as it suggests the possibility of a fictitious vendor created to divert funds to the employee.

Other Options:

Option A: Missing documentation may indicate poor record-keeping but is not a strong indicator of fraud on its own.

Option B: Delayed invoices might indicate inefficiencies, not fraud.

Thus, the correct answer is C. The address on one of the vendor invoices matches an employee's residential address.

Comprehensive and Detailed Step-by-Step Explanation:

Enhancing Relationships: Status meetings facilitate two-way communication, keeping management informed about audit progress and fostering collaboration. Open discussions during these meetings help address concerns and strengthen the relationship between internal audit and management.

Other Options:

Option B: Status meetings should involve two-way communication, not just updates from auditors.

Option C: The chief audit executive and senior management are typically involved in higher-level discussions, not routine engagement status meetings.

Thus, the correct answer is A.

Comprehensive and Detailed Step-by-Step Explanation:

Root Cause Analysis: This method identifies underlying causes of issues rather than just addressing symptoms, allowing internal auditors to recommend targeted improvements to controls and processes. By identifying multiple causes, auditors can propose tailored control enhancements to address each cause effectively.

Other Options:

Option A: While accurate, this is a general description of the benefits of internal auditing, not specific to root cause analysis.

Option B: Root cause analysis often requires subject matter expertise and careful analysis; it is not always simple or straightforward.

Thus, the correct answer is C. Root cause analysis enables internal auditors to reveal multiple causes and recommend control enhancements for each cause identified.

Comprehensive and Detailed Step-by-Step Explanation:

Reference to IIA Standards:

Standard 1110 - Organizational Independence: Organizational independence is achieved when the CAE reports functionally to the board or audit committee and administratively to the CEO or equivalent.

Reasoning:

Option C is correct because administrative reporting to the CEO ensures the CAE has access to resources, support, and operations without impairing functional independence.

Option A and Option B describe functional reporting lines (e.g., approval of the audit charter and plans), which are distinct from administrative reporting.

Significance of Reporting Structure:

Administrative reporting ensures the day-to-day management of the internal audit function, while functional reporting maintains independence and alignment with governance.

Comprehensive and Detailed Step-by-Step Explanation:

Risk Assessment in Planning: Conducting a risk assessment typically follows documentation of the process, as understanding the process provides the necessary context for identifying and evaluating risks.

Other Options:

Option A: Resource allocation happens after risk assessment determines the scope and focus of the engagement.

Option B: Determining objectives usually occurs after assessing risks.

Thus, the correct answer is C.