Certified Internal Auditor (CIA) Part 1: Business Acumen — Question 134

Which of the following would best assist the internal audit activity in assessing whether an organization's responses to risk are aligned with its risk appetite?

Answer options

• A. Analyzing the results of successful testing of controls and monitoring procedures implemented by management.
• B. Determining that there are no gaps between the internal auditors' risk assessment and the risk assessment performed by the organization.
• C. Obtaining evidence that employees throughout the organization are aware of the organization's risk appetite.
• D. Verifying that previously identified organizational risks were documented in board meeting minutes.

Correct answer: B

Explanation

Option B is correct because it directly addresses the alignment between the internal auditors' risk assessment and the organization's own assessment, which is crucial for evaluating risk appetite. Options A, C, and D, while relevant, do not specifically measure the correspondence between internal and organizational risk assessments, making them less effective for this objective.