Certified Internal Auditor (CIA) Part 2: Practice of Internal Auditing — Question 282

When performing a preliminary process risk assessment, which action should be taken to determine the likelihood of an employee paying unapproved invoices?

Answer options

• A. Discuss the accounts payable process with the organization’s external auditor.
• B. Review supporting documentation of paid invoices for evidence of approval to pay.
• C. Review benchmarks related to the accounts payable process in similar organizations.
• D. Discuss the accounts payable process with the accounts payable manager.

Correct answer: D

Explanation

The correct answer is D because discussing the accounts payable process with the accounts payable manager provides direct insights into the processes and potential risks involved. Options A, B, and C, while useful for understanding overall risk, do not focus on the internal processes as specifically as option D does, making them less effective for this particular assessment.