Certified Internal Auditor (CIA) Part 2: Practice of Internal Auditing — Question 202

The chief audit executive is completing the audit plan. According to IIA guidance, which of the following is the best method of selecting the audits to be completed?

Answer options

• A. A rotational audit plan with core audits being done every two to four years.
• B. A risk-based audit plan that also covers important operational areas.
• C. An audit plan based upon the previous audit results and findings.
• D. An audit plan based upon responses from management on key risk areas.

Correct answer: D

Explanation

The correct answer is D because it emphasizes the importance of management's input on key risk areas, ensuring the audit plan aligns with the organization's priorities and concerns. Options A, B, and C, while valid approaches, do not prioritize management's insights, which are crucial for addressing current risks effectively.