Attributes of Effective Results Communication

Introduction
Audit work only creates value when its results are communicated well. A sound engagement can still fail if the report is confusing, biased, late, or full of errors. For this reason, the IIA's Global Internal Audit Standards set out specific quality attributes that every engagement communication must have. The CIA Challenge Exam tests these attributes often. Questions usually describe a scenario and ask you to identify which attribute was met or violated.

Why It Is Important
1. Credibility of internal audit: A single factual error can damage stakeholders' trust in the whole audit function.
2. Driving action: Management acts on recommendations it understands, accepts as fair, and receives in time to respond.
3. Governance support: The board and senior management rely on audit communications to oversee risk and control. Poor communication weakens governance.
4. Conformance with the Standards: The Standards require these attributes (Standard 11.2, Effective Communication, which was formerly Standard 2420, Quality of Communications). Failing to meet them is nonconformance.
5. Relationship management: Constructive, objective communication keeps the auditor and the engagement client in a cooperative relationship rather than an adversarial one.

What It Is: The Seven Attributes
The Standards state that internal auditors must ensure communications are accurate, objective, clear, concise, constructive, complete, and timely.
Memory aid: A-O plus four Cs plus T (Accurate, Objective, Clear, Concise, Constructive, Complete, Timely).

1. Accurate
Free from errors and distortions, and faithful to the underlying facts. Accuracy depends on reliable evidence and careful verification of figures, names, dates, and descriptions.
Violation example: The report states losses of $500,000 when the evidence supports $50,000.

2. Objective
Fair, impartial, and unbiased. It is the result of a fair-minded, balanced assessment of all relevant facts and circumstances. Objective communications avoid inflammatory language. Where appropriate, they acknowledge satisfactory performance and management's views.
Violation example: The report uses words such as 'reckless' or 'incompetent', or it presents only evidence that supports the auditor's view.

3. Clear
Easily understood and logical. Clear communications avoid unnecessary technical jargon and are written so the intended audience can follow the reasoning. They often use headings, summaries, and charts.
Violation example: An IT audit report for the board is full of undefined acronyms and technical terms.

4. Concise
To the point. Concise communications avoid unnecessary elaboration, superfluous detail, redundancy, and wordiness.
Violation example: A 60-page report repeats the same observation in several sections and includes long descriptions of routine procedures.

5. Constructive
Helpful to the engagement client and the organization, and leads to improvements where needed. Constructive communications focus on solutions, practical recommendations, and root causes rather than blame.
Violation example: The report lists failures but offers no recommendations and has a punitive tone.

6. Complete
Lacks nothing essential to the target audience. Complete communications include all significant and relevant information and observations needed to support the recommendations and conclusions.
Violation example: The report concludes that controls are ineffective but omits the criteria, the cause, or the significance of the issue.

7. Timely
Opportune and expedient, depending on how significant the issue is. Timely communication allows management to take appropriate corrective action. Urgent matters may need interim or immediate communication before the final report.
Violation example: A serious fraud risk is identified in March but not reported until the final report in September.

How It Works in Practice
Planning the communication: Identify the audience, such as the board, senior management, or process owners. Then decide the format (written, oral, or interim) and the level of detail.
Building findings: Use the elements of a finding (criteria, condition, cause, effect, and recommendation or action plan). These elements support completeness and constructiveness.
Drafting and review: Supervisory review and fact-checking with management (for example, an exit conference or a draft report review) support accuracy and objectivity.
Editing: Remove jargon and redundancy to make the report clear and concise. An executive summary serves senior readers.
Timing: Use interim reports for significant issues, and issue final reports promptly after fieldwork.
Correcting errors (Standard 11.4, formerly 2421): If a final communication contains a significant error or omission, the chief audit executive must communicate the corrected information to all parties who received the original.
Related requirements: If an engagement did not conform with the Standards, this must be disclosed (formerly 2431). If management accepts a level of risk that exceeds the organization's risk appetite, the chief audit executive must discuss it with senior management and, if unresolved, escalate it to the board (Standard 11.5, formerly 2600).

Distinguishing Commonly Confused Attributes
Accurate vs. Objective: Accuracy is about factual correctness. Objectivity is about fairness and the absence of bias. A report can be factually accurate yet still not objective, for example if it is one-sided or uses emotive language.
Clear vs. Concise: Clarity is about understandability and logic. Conciseness is about brevity without padding. A short report can still be unclear, and a clear report can still be wordy.
Concise vs. Complete: These two must be balanced. Remove what is unnecessary, but never remove what is essential to support the conclusions.
Constructive vs. Objective: Constructive means helpful and improvement-oriented. Objective means unbiased. Harsh, accusatory wording usually violates both, but if the question stresses the absence of recommendations, the answer is constructive.
Complete vs. Accurate: Missing information is a completeness issue. Wrong information is an accuracy issue.

Exam Tips: Answering Questions on Attributes of Effective Results Communication
Tip 1: Memorize the seven attributes exactly. Distractors often include plausible words that are not on the list, such as 'persuasive', 'detailed', 'comprehensive', 'confidential', or 'lengthy'. If an option is not one of the seven, it is usually wrong.
Tip 2: Find the keyword in the scenario. Map the scenario's language to an attribute:
- error or distortion = accurate
- bias, one-sided, emotive = objective
- jargon, confusing = clear
- redundant, wordy = concise
- no recommendations, blaming = constructive
- missing support = complete
- delay = timely
Tip 3: Watch for 'most' and 'best' wording. When several attributes seem to apply, choose the one most directly tied to the defect described.
Tip 4: Know the definitions word for word. Some questions quote a definition, such as 'lacking nothing essential to the target audience', and ask which attribute it describes. Here the answer is complete.
Tip 5: Remember the balance principle. If an option suggests including every detail to be 'complete', recognize that this violates conciseness. Completeness means all significant and relevant information, not everything.
Tip 6: Timeliness depends on significance. Expect questions where the correct action is an interim or immediate communication of a serious issue rather than waiting for the final report.
Tip 7: Know the error-correction rule. For a significant error or omission in a final communication, the chief audit executive must send corrected information to all parties who received the original. Distractors may suggest only the board, or only a correction in next year's report.
Tip 8: Acknowledging good performance supports objectivity. Including satisfactory performance and management's responses shows balance.
Tip 9: Tailor to the audience. Clarity is judged from the reader's perspective. A technically correct but jargon-heavy report sent to the board is not clear.
Tip 10: Eliminate extremes. Answers saying auditors should 'never' communicate orally or 'always' issue reports immediately are usually incorrect.

Sample Practice Questions
Q1: An audit report states that the purchasing manager 'showed complete disregard for policy' and omits management's explanation of mitigating controls. Which attribute is most clearly lacking?
Answer: Objective. The emotive language and one-sided presentation show bias.

Q2: A report includes a conclusion that controls are inadequate but does not describe the criteria used or the effect of the deficiency. Which attribute is lacking?
Answer: Complete. Essential supporting information is missing.

Q3: After issuing a final report, the chief audit executive discovers that a key figure was materially misstated. What should be done?
Answer: Communicate the corrected information to all parties who received the original communication.

Q4: Which definition describes a 'concise' communication?
Answer: One that is to the point and avoids unnecessary elaboration, superfluous detail, redundancy, and wordiness.

Summary
Effective results communication must be accurate, objective, clear, concise, constructive, complete, and timely. Learn the precise definitions, understand how the attributes differ and must be balanced, and practice matching scenario keywords to the right attribute. Together with the rules on correcting errors and disclosing nonconformance, these attributes are a dependable source of marks on the CIA Challenge Exam.