Engagement Planning

Setting engagement objectives, scope and evaluation criteria, planning around key risks and controls, choosing the engagement approach, detailed risk assessment, work programs, and engagement resourcing.

5 minutes 5 Questions

Engagement Planning is a critical phase in the internal audit process, as outlined in the Certified Internal Auditor (CIA) Part 2 exam. It establishes the foundation for conducting an effective and efficient audit engagement. According to IIA Standards, specifically Standard 2200, internal auditors…

Concepts covered
Strategic Objectives and Performance Measures of the ActivityTesting Control Effectiveness and EfficiencyDeveloping Evaluation CriteriaManaging Changes to Objectives and ScopeEngagement Approaches: Agile, Traditional, Integrated, and RemoteDetermining Engagement ObjectivesPreparing and Evaluating the Engagement Work ProgramDefining Engagement ScopeBusiness Continuity and Disaster Recovery ReadinessOrganizational Structure, Culture, and Tone at the TopRisks and Controls in Third-Party, ERP, CRM, and GRC SystemsPrioritizing Risks and ControlsEngagement-Level Risk AssessmentProcedures to Evaluate Control DesignEngagement Resource Planning and Resource LimitationsApplying Topical Requirements in EngagementsEmerging Risks and the Impact of ChangeTesting Methodologies for Finance, IT, Operations, and CybersecurityScope Limitations and Stakeholder RequestsProject Management for Audit EngagementsIT Control Frameworks, Data Privacy, and Data SecurityRisks and Controls in Procurement, Payables, and InventoryCybersecurity Risks and IT General ControlsFinance and Accounting Concepts for Engagement PlanningData Privacy Principles in Engagement PlanningFinancial and Technological Resources for the EngagementUsing Prior Audit Reports and Other Assurance Work in PlanningCompliance Process Risks and ControlsProgram Change Management ControlsCharacteristics of Reliable Evaluation CriteriaPervasive Financial, Operational, and Regulatory RisksIndividual and Group Behaviors in the Control EnvironmentRegulatory Requirements and Internal Policies in Engagement ObjectivesBackup and Recovery TestingAsset Management Risks and ControlsIncident Management and Business ResilienceShort-Term and Long-Term LiabilitiesLogical Access and Segregation of Duties ControlsBusiness Impact AnalysisCapital and Investments in Engagement PlanningRisk Appetite and Tolerance in Setting Engagement ObjectivesCurrent and Fixed Assets in Engagement PlanningThird-Party Process Risks and ControlsCentralized Versus Decentralized and Flat Versus Traditional StructuresAgile Auditing PrinciplesSupply Chain Management Risks and ControlsRemote Auditing ConsiderationsIn-Person Versus Remote Work Environments and RiskEstablishing Criteria When Management Has Not Defined AnyAssurance Versus Advisory Engagement Objectives
Test mode:
More Engagement Planning questions
1487 questions (total)
Practice 100 questions
One session at a time, always new questions