Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 60

According to IIA guidance, which of the following corporate social responsibility (CSR) evaluation activities may be performed by the internal audit activity?
1. Consult on CSR program design and implementation.
2. Serve as an advisor on CSR governance and risk management.
3. Review third parties for contractual compliance with CSR terms.
4. Identify and mitigate risks to help meet the CSR program objectives.

Answer options

• A. 1, 2, and 3
• B. 1, 2, and 4
• C. 1, 3, and 4
• D. 2, 3, and 4

Correct answer: A

Explanation

The correct answer is A because internal audit can consult on CSR program design, advise on governance and risk management, and review third-party compliance with CSR terms. Options B, C, and D include tasks that are outside the scope of internal audit's role in CSR activities, either missing compliance reviews or including tasks that are not typically performed by internal audit.