Engagement Performance

Performing an engagement: gathering and evaluating evidence, audit technology, process mapping and data analytics, analytical review, findings, workpapers, conclusions, supervision and stakeholder communication.

5 minutes 5 Questions

In the Certified Internal Auditor (CIA) Challenge Exam, Engagement Performance covers how internal auditors carry out an assurance or advisory engagement after planning and before final communication. It is mainly drawn from the Practice of Internal Auditing content. Under the earlier IPPF it was S…

Concepts covered
Engagement SupervisionEngagement WorkpapersAnalytical Review TechniquesRelevance, Sufficiency and Reliability of EvidenceCommunication with Stakeholders During the EngagementAnalytical Approaches and Process MappingDeveloping Engagement ConclusionsAudit Technology for Findings and ConclusionsCriteria versus Condition and Significance of FindingsSources of Engagement Information
Test mode:
Start practice test

CIA Challenge - Engagement Performance Example Questions

Test your knowledge of Engagement Performance

Question 1

At the closing meeting of an assurance engagement, a process owner disputes the internal auditor's rating of a finding as significant. The process owner asks that the rating be lowered and says they will complain to senior management otherwise. The engagement supervisor has reviewed the workpapers and confirmed that the evidence supports the rating. Which response by the internal auditor is most appropriate?

Correct Answer: Retain the supported rating, inform the engagement supervisor, and present the process owner's differing view in the final communication.

The internal auditor should keep the evidence-supported rating, keep the supervisor informed, and include management's differing view in the final communication. This preserves objectivity while giving management a fair voice, consistent with Global Internal Audit Standards on disagreements with management.
Lowering the rating to preserve cooperation lets intimidation override evidence and impairs objectivity. Referring the rating to the board is premature, because escalation is needed only if a disagreement cannot be resolved and affects significant risks, not as routine practice before reporting. Holding the report until senior management agrees improperly gives management control over audit conclusions and the timing of communications.
Key concept: handling management disagreements while maintaining objectivity and evidence-based ratings.

Question 2

During planning, an internal auditor needs to confirm that the documented flowchart of the purchase order process matches how transactions are actually handled. The auditor follows a single purchase order from requisition through payment, speaking with the staff who perform each step. Which statement best explains why this method suits the objective?

Correct Answer: It traces one transaction through each actual step to confirm the documented design

A walkthrough follows a single transaction from start to finish, observing each actual step and speaking with the people who perform it. This lets the auditor confirm that the documented flowchart matches how the process really works, which is exactly the planning objective.
Testing a large sample to conclude on operating effectiveness is detailed control testing, not a planning-stage check of process design. Staff descriptions alone are inquiry, which is weak evidence; a walkthrough corroborates what staff say by tracing real documents. Forecasting failures from past transaction trends is analytical review, not verification of the documented process.
Key concept: walkthroughs confirm understanding of process design during engagement planning.

Question 3

During an assurance engagement over customer onboarding, an internal auditor finds that required identity verification steps were skipped for a sample of new accounts. The operations manager owns the onboarding process. The compliance function performs periodic monitoring of these steps, and its latest monitoring review reported no exceptions. When determining recipients of the final engagement communication, which approach is most appropriate?

Correct Answer: Include compliance leadership with operations management, as its monitoring role is affected by the results.

Final engagement results should go to the parties who can ensure the results are given due consideration. Compliance leadership qualifies because its monitoring reported no exceptions while skipped verification steps existed, so the findings bear directly on its role and may call for corrective action in its monitoring.
Limiting distribution to operations management ignores the fact that the findings affect compliance even though compliance is not the process owner. Routing results through compliance first improperly gives a second-line function a validation role and delays the process owner. Notifying the regulator is not the auditor's default role; disclosure outside the organization requires proper authorization and protocols.
Key concept: determining appropriate recipients of engagement communications.

More Engagement Performance questions
717 questions (total)
Practice 100 questions
One session at a time, always new questions