Certified Internal Auditor (CIA) Part 2: Practice of Internal Auditing — Question 287

In a health care organization, the internal audit activity provides overall assurance on governance, risk, and control. The chief audit executive advises and influences senior management, and the audit strategy leverages the organization's management of risk. According to IIA guidance, which of the following stages of internal audit maturity best describes this organization?

Answer options

• A. Infrastructure.
• B. Emerging.
• C. Managed.
• D. Initial.

Correct answer: C

Explanation

The correct answer is C, as a 'Managed' maturity level indicates that the internal audit function is integrated into the organization's risk management processes and provides significant assurance to governance. Options A and D reflect earlier stages of development where internal audit functions are not as comprehensive or integrated. Option B, 'Emerging,' suggests that the organization is still developing its audit practices, which does not align with the described scenario.