Internal Audit Midterm | Comprehensive Study Guide, Exam Questions & Answers
Internal Auditing Strengthens the organizations ability to create, protect, and sustain value through
the assurance and advisory engagements that are preformed
Assurance and advisor engagements differ in 3 respects: 1. The primary purpose of the engagement
2. Who determines the nature & scope
3. The parties involved
Primary purpose of internal audit assurance services is to provide an objective assessment of the adequacy of the design and
implementation of controls to achieve organizations objectives within a business
area
Internal advisory services Provides advice & other assistance; mutually agree on the nature and scope of
advisory engagements
The purpose of internal auditing: 1. strengthens the organizations ability to create, protect, sustain value
2. Providing the Board of Management with independent, Risk-based and objective
assurance, advice, insight, and foresight
3. Internal auditing enhances the organizations successful achievement of
objectives
4. Internal auditing enhances the organizations governance, risk management, and
control processes
5. Internal auditing enhances the organization's decision making and oversight
6. Internal auditing enhances organizations reputation and credibility with its
stakeholders
7. Internal auditing enhances the organizations ability to service the public interest
Objectivity means that an internal auditor is able to make impartial, unbiased judgement
Assurance conclusions communicated to stakeholders regarding the effectiveness of the
governance, risk management, and control process over areas of the business
Advice Recommendations provided by internal auditors over a business process or area,
policies, systems
Insight Observations on a topic that provide a deeper understanding of it
Foresight Anticipation of areas that may require attention so that a plan or strategy can be
developed for preparedness
Achievement of its objectives (4) 1. Strategic
2. Operations
3. Reporting
4. Compliance
Strategic are those goals that management sets specifically related to stakeholders interests
Operations pertain to the effectiveness and efficiency of the entity's operations
Stuvia 2026-2027
, Internal Audit Midterm | Comprehensive Study Guide, Exam Questions & Answers
Reporting Pertains to internal and external financial and non financial reporting and may
encompass reliability, timeliness, transparency
Compliance Pertains to adherence to laws and regulations the entity is subject
Most Common AI agent Applications: 1. IT and Technical support
2. HR and Employee Lifecycle
3. Finance and Compliance
History of IA - Internal auditing can be traced back to the Persian Empire
- Murray (1976) attributes the start of internal Auditing to Darius the Great
- His empire was divided into 20 provinces, each administered by a satrap
(governor) who paid taxes to the empire according to the wealth of the province
- "The eyes and ears of the King"
Father of IA (to evaluate, counselor) Lawrence Sawyer
7 Things every IA should know about the New Standard: 1. New emphasis on serving the public interest
2. Different structure (more logical and Seamless)
3. More Prescriptive standards
4. Less Differentiation Between assurance and advisory Requirements
5. Greater emphasis on IA Strategy, Relationship-building, and communication
6. New emphasis on performance measurement
7. Raised Bar for Quality Assessment
Topical Requirements (Global IA Standards) (5) 1. Purpose
2. Ethics and Professionalism
3. Governing
4. Managing
5. Performing
Domain I Purpose of Internal auditing
Domain II Ethics and professionalism
Internal audit work results: must be reviewed before engagement communications are released, which helps
provide reasonable assurance that the work was performed objectively
Third-Party Topical Requirements applies to an internal audit of a company that relies on an outsourced cloud-based
payroll provider
High Risk Areas - Cybersecurity
- Business Continuity
- organizational culture
GAGAS yellow book (external quality review every 3 years)
Stuvia 2026-2027
, Internal Audit Midterm | Comprehensive Study Guide, Exam Questions & Answers
IIA's Global internal audit standards red book (external quality review every 5 years)
Orange Book acts as a bridge between these two frameworks, highlighting where they align
where they are different
The Board of Directors is responsible for providing: - Strategic direction and Guidance
- Governance oversight
Governance --> Risk Management --> Internal control Governance <-- Risk Management <-- Internal control
key Components of governance oversight is the IIA's Three line model. It illustrates that the governing body's
responsibility for oversight includes the risk management and internal audit activities
Corporate governance provides a structure through which: - Objectives of the company are set and
- the means of attaining those objectives
COSO Framework 1. Control Environment
2. Risk Assessment
3. Control Activities
4. Information and Communication
5. Monitoring
COSO released Corporate governance: Guiding principles - The documents aim to clarify board roles and responsibilities
for board oversight: - provide practical illustrations
- create a common reference point
- support disciplined long-term decision making
Top three priorities of the audit committee 1. Cybersecurity
2. Enterprise Risk Management
3. Finance and Internal audit talent
Roles of the Board Provides strategic oversight and long-term value creation that keeps the
organization aligned with the needs and interests of its primary stakeholders
Roles for Management sets policies and procedures
Roles for IA Enhances and protects organizational value by providing risk-based and objective
assurance, advice, and insight
Combined Assurance aligning various assurance activities within an organization to ensure that assurance
gaps do not exist
What is Culture? - Relys' on two-way conversations
- a collaborative approach to decision-making
- team-based effort to get the work done " they way we do things around here"
Stuvia 2026-2027
Internal Auditing Strengthens the organizations ability to create, protect, and sustain value through
the assurance and advisory engagements that are preformed
Assurance and advisor engagements differ in 3 respects: 1. The primary purpose of the engagement
2. Who determines the nature & scope
3. The parties involved
Primary purpose of internal audit assurance services is to provide an objective assessment of the adequacy of the design and
implementation of controls to achieve organizations objectives within a business
area
Internal advisory services Provides advice & other assistance; mutually agree on the nature and scope of
advisory engagements
The purpose of internal auditing: 1. strengthens the organizations ability to create, protect, sustain value
2. Providing the Board of Management with independent, Risk-based and objective
assurance, advice, insight, and foresight
3. Internal auditing enhances the organizations successful achievement of
objectives
4. Internal auditing enhances the organizations governance, risk management, and
control processes
5. Internal auditing enhances the organization's decision making and oversight
6. Internal auditing enhances organizations reputation and credibility with its
stakeholders
7. Internal auditing enhances the organizations ability to service the public interest
Objectivity means that an internal auditor is able to make impartial, unbiased judgement
Assurance conclusions communicated to stakeholders regarding the effectiveness of the
governance, risk management, and control process over areas of the business
Advice Recommendations provided by internal auditors over a business process or area,
policies, systems
Insight Observations on a topic that provide a deeper understanding of it
Foresight Anticipation of areas that may require attention so that a plan or strategy can be
developed for preparedness
Achievement of its objectives (4) 1. Strategic
2. Operations
3. Reporting
4. Compliance
Strategic are those goals that management sets specifically related to stakeholders interests
Operations pertain to the effectiveness and efficiency of the entity's operations
Stuvia 2026-2027
, Internal Audit Midterm | Comprehensive Study Guide, Exam Questions & Answers
Reporting Pertains to internal and external financial and non financial reporting and may
encompass reliability, timeliness, transparency
Compliance Pertains to adherence to laws and regulations the entity is subject
Most Common AI agent Applications: 1. IT and Technical support
2. HR and Employee Lifecycle
3. Finance and Compliance
History of IA - Internal auditing can be traced back to the Persian Empire
- Murray (1976) attributes the start of internal Auditing to Darius the Great
- His empire was divided into 20 provinces, each administered by a satrap
(governor) who paid taxes to the empire according to the wealth of the province
- "The eyes and ears of the King"
Father of IA (to evaluate, counselor) Lawrence Sawyer
7 Things every IA should know about the New Standard: 1. New emphasis on serving the public interest
2. Different structure (more logical and Seamless)
3. More Prescriptive standards
4. Less Differentiation Between assurance and advisory Requirements
5. Greater emphasis on IA Strategy, Relationship-building, and communication
6. New emphasis on performance measurement
7. Raised Bar for Quality Assessment
Topical Requirements (Global IA Standards) (5) 1. Purpose
2. Ethics and Professionalism
3. Governing
4. Managing
5. Performing
Domain I Purpose of Internal auditing
Domain II Ethics and professionalism
Internal audit work results: must be reviewed before engagement communications are released, which helps
provide reasonable assurance that the work was performed objectively
Third-Party Topical Requirements applies to an internal audit of a company that relies on an outsourced cloud-based
payroll provider
High Risk Areas - Cybersecurity
- Business Continuity
- organizational culture
GAGAS yellow book (external quality review every 3 years)
Stuvia 2026-2027
, Internal Audit Midterm | Comprehensive Study Guide, Exam Questions & Answers
IIA's Global internal audit standards red book (external quality review every 5 years)
Orange Book acts as a bridge between these two frameworks, highlighting where they align
where they are different
The Board of Directors is responsible for providing: - Strategic direction and Guidance
- Governance oversight
Governance --> Risk Management --> Internal control Governance <-- Risk Management <-- Internal control
key Components of governance oversight is the IIA's Three line model. It illustrates that the governing body's
responsibility for oversight includes the risk management and internal audit activities
Corporate governance provides a structure through which: - Objectives of the company are set and
- the means of attaining those objectives
COSO Framework 1. Control Environment
2. Risk Assessment
3. Control Activities
4. Information and Communication
5. Monitoring
COSO released Corporate governance: Guiding principles - The documents aim to clarify board roles and responsibilities
for board oversight: - provide practical illustrations
- create a common reference point
- support disciplined long-term decision making
Top three priorities of the audit committee 1. Cybersecurity
2. Enterprise Risk Management
3. Finance and Internal audit talent
Roles of the Board Provides strategic oversight and long-term value creation that keeps the
organization aligned with the needs and interests of its primary stakeholders
Roles for Management sets policies and procedures
Roles for IA Enhances and protects organizational value by providing risk-based and objective
assurance, advice, and insight
Combined Assurance aligning various assurance activities within an organization to ensure that assurance
gaps do not exist
What is Culture? - Relys' on two-way conversations
- a collaborative approach to decision-making
- team-based effort to get the work done " they way we do things around here"
Stuvia 2026-2027
