Clear and Concise Communications: A Complete Guide for CIA Exam Candidates
Introduction
Internal audit work only adds value when its results are understood and acted upon. However strong the fieldwork, a report that is confusing, overly technical or padded with detail can bury key findings, delay corrective action and damage the credibility of the internal audit activity. For this reason, the IIA expects engagement communications to be clear and concise, along with the other quality attributes. This guide explains what these terms mean, why they matter, how they are applied in practice and how to handle exam questions on the topic.
1. Why Clear and Concise Communications Are Important
Drives action: Management and the board must understand a finding before they can fix it. Clear communication shortens the path from observation to corrective action.
Respects the reader's time: Senior executives and audit committee members read many documents. Concise reports let them grasp the key messages quickly.
Supports governance: The board relies on internal audit for assurance. Ambiguous wording can lead to wrong conclusions about risk and control.
Protects credibility: Jargon, rambling or disorganized reports suggest weak thinking. Crisp reports signal professionalism and objectivity.
Reduces misinterpretation and disputes: Precise, logical wording reduces the risk that management misreads a finding, overreacts or underreacts.
Meets professional standards: The IIA Standards require communications to have specific qualities. Under the 2017 IPPF this was Standard 2420 - Quality of Communications. Under the 2024 Global Internal Audit Standards it falls under Standard 11.2 - Effective Communication and the requirements for communicating engagement results (Domain IV, Principle 15).
2. What Clear and Concise Communications Are
The IIA lists seven qualities of communication. They must be accurate, objective, clear, concise, constructive, complete and timely. A common memory aid is ACCOCCT, or simply the phrase 'All Clear Communications Offer Complete, Constructive Timeliness'.
Clear communications (IIA definition): communications that are easily understood and logical, avoiding unnecessary technical language and providing all significant and relevant information.
Key elements of clarity:
- Logical structure and flow
- Plain language, with technical terms avoided or defined
- Inclusion of all significant and relevant information, so the reader is not left guessing
- Unambiguous wording, with specific rather than vague statements
Concise communications (IIA definition): communications that are to the point and avoid unnecessary elaboration, superfluous detail, redundancy and wordiness.
Key elements of conciseness:
- Getting to the point quickly
- Removing repetition and filler
- Excluding detail that does not support the message
- Using short sentences and paragraphs
How they relate to the other qualities:
- Accurate: free from errors and distortions, faithful to the facts.
- Objective: fair, impartial, unbiased, based on a balanced view of all relevant facts.
- Constructive: helpful to the engagement client and the organization, leading to improvement.
- Complete: lacks nothing essential and includes all significant, relevant information needed to support recommendations and conclusions.
- Timely: well-timed and expedient, so management can take action.
Important distinction: Concise does NOT mean short at any cost. A communication must still be complete. Conciseness removes what is unnecessary. It does not remove what is essential. Similarly, clarity includes providing all significant and relevant information, so clarity and completeness overlap.
3. How Clear and Concise Communication Works in Practice
a) Know the audience
Tailor content and depth to the reader. The board or audit committee usually needs a high-level summary of significant risks and overall conclusions. Operational management needs detailed findings and action plans. Technical terms suitable for IT staff may need translating for executives.
b) Use a logical structure
Typical final engagement communications include:
- Executive summary with the key messages up front
- Objectives, scope and results of the engagement
- Overall conclusion or opinion, where applicable
- Findings, recommendations and management action plans
Each finding is usually built around the elements of a finding: Criteria (what should be), Condition (what is), Cause (why the gap exists), Effect (the risk or impact) and Recommendation. This structure itself promotes clarity.
c) Prioritize and rate findings
Put the most significant issues first and use ratings such as high, medium and low, so readers immediately see what matters most.
d) Write plainly
- Prefer active voice. Write 'The department did not reconcile accounts' rather than 'Accounts were not reconciled'.
- Use specific, quantified statements. Write '14 of 60 invoices lacked approval' rather than 'many invoices lacked approval'.
- Avoid jargon, acronyms and legalistic phrasing, or define them.
- Use one idea per paragraph.
e) Eliminate excess
- Remove redundant phrases such as 'completely eliminate' or 'past history'.
- Do not describe audit procedures in excessive detail in the report. Keep that detail in the working papers.
- Move supporting data to appendices.
f) Use visuals wisely
Tables, charts and heat maps can summarize complex information concisely, provided they are labeled and easy to read.
g) Review and edit
Supervisory review, peer review and discussion with management before the report is issued help catch ambiguity, errors and wordiness. Holding an exit meeting and seeking management's comments also improves clarity and helps prevent misunderstandings.
4. Examples
Unclear and wordy: 'During the course of our review activities, it was noted by the audit team that there appeared to be certain instances in which the procurement function may not have consistently adhered to the established protocols relating to purchase order authorization.'
Clear and concise: 'Procurement approved 9 of 40 sampled purchase orders (23%) above the buyer's authorization limit, contrary to Policy P-12.'
The improved version is specific, quantified, logical and free of filler. It is still complete, because it states the condition and the criteria.
5. Common Pitfalls
- Burying the key message deep in the report
- Excessive technical or audit jargon
- Listing every minor exception at equal weight with major issues
- Vague qualifiers such as 'some', 'several' or 'may'
- Repeating the same point in the summary, the findings and the conclusion without adding value
- Cutting essential context in the name of brevity, which violates completeness
6. Exam Tips: Answering Questions on Clear and Concise Communications
Tip 1 - Memorize the seven qualities and their exact definitions. Exam questions often describe a report flaw and ask which quality is lacking. For example:
- Jargon or an illogical flow points to a lack of clarity.
- Redundancy or excessive detail points to a lack of conciseness.
- Missing essential information points to a lack of completeness.
- Factual errors point to a lack of accuracy.
- Biased or one-sided content points to a lack of objectivity.
- A report issued too late to act on points to a lack of timeliness.
- A blaming tone with no path forward points to a lack of constructiveness.
Tip 2 - Watch for keywords. 'Easily understood', 'logical' and 'avoids technical language' signal clear. 'To the point', 'avoids unnecessary elaboration', 'superfluous detail', 'redundancy' and 'wordiness' signal concise.
Tip 3 - Do not confuse concise with incomplete. If an answer suggests removing information needed to support a conclusion, it is wrong, even if it makes the report shorter.
Tip 4 - Remember the overlap between clear and complete. The IIA definition of clear includes 'providing all significant and relevant information'. When a question focuses on understandability, choose clear. When it focuses on essential content being missing, choose complete.
Tip 5 - Think audience. When asked how to improve a report for the board, favor answers involving executive summaries, high-level conclusions and prioritized significant risks, rather than more detail.
Tip 6 - Detail belongs in working papers. If a report includes lengthy descriptions of audit procedures, the best fix is usually to summarize them and keep the detail in the documentation.
Tip 7 - Eliminate extreme answers. Options such as 'remove all findings except high-risk ones' or 'include every exception noted' are usually wrong. The correct answer balances conciseness with completeness.
Tip 8 - Know the error-correction requirement. If a final communication contains a significant error or omission, the chief audit executive must communicate corrected information to all parties who received the original. This links to accuracy and completeness and is often tested alongside communication quality.
7. Practice Questions
Q1. A draft audit report contains long paragraphs describing every sampling step and repeats the same conclusion in three sections. Which quality is most lacking?
A. Accuracy B. Objectivity C. Conciseness D. Timeliness
Answer: C. Superfluous detail and redundancy indicate a lack of conciseness.
Q2. An IT audit report sent to the audit committee uses numerous undefined technical acronyms, and committee members could not understand the significance of the findings. Which quality is most lacking?
A. Clarity B. Completeness C. Constructiveness D. Accuracy
Answer: A. Clear communications avoid unnecessary technical language and are easily understood.
Q3. To make a report more concise, an auditor proposes deleting the criteria from each finding. This is inappropriate because it would compromise:
A. Timeliness B. Completeness C. Objectivity D. Independence
Answer: B. Criteria are essential to support the finding. Conciseness must not sacrifice completeness.
8. Summary
Clear communications are logical, easily understood, free of unnecessary jargon and contain all significant, relevant information. Concise communications are to the point and free of unnecessary elaboration, superfluous detail, redundancy and wordiness. Together with accuracy, objectivity, constructiveness, completeness and timeliness, they make internal audit results usable and credible. For the exam, master the definitions, recognize the scenario keywords, keep the audience in mind and remember that concise never means incomplete.
