601.2-CIAP: Internal Audit Engagement and Internal Audit Function (Advanced Level)
*** Internal Audit Engagement:
Session-01: Section A &C. Engagement Planning, Supervision and Communication (60%).
- Determine engagement objectives and scope.
- Determine evaluation criteria based on relevant information gathered.
- Plan the engagement to assess key risks and controls.
- Determine the appropriate approach for an engagement.
Session-02: Section A &C. Engagement Planning, Supervision and Communication (N/A).
- Complete a detailed risk assessment of each activity under review.
- Determine engagement procedures and prepare the engagement work program.
- Determine the level of resources and skills needed for the engagement
- Apply appropriate supervision throughout the engagement.
- Apply appropriate communication with stakeholders throughout the engagement.
Session-03: Section B. Information Gathering, Analysis, and Evaluation (40%).
- Identify sources of information to support engagement objectives and procedures.
- Evaluate the relevance, sufficiency, and reliability of evidence gathered to support
engagement objectives. - Evaluate technology options that internal auditors may use to develop and support
engagement findings and conclusions. - Apply appropriate analytical approaches and process mapping techniques.
- Apply analytical review techniques.
Session-04: Section B. Information Gathering, Analysis, and Evaluation (N/A).
- Determine whether there is a difference between evaluation criteria and existing
conditions and evaluate the significance of each finding. - Prepare work papers, including relevant information to support conclusions and
engagement results. - Summarize and develop engagement conclusions.
- Apply appropriate supervision throughout the engagement.
- Apply appropriate communication with stakeholders throughout the engagement.
*** Internal Audit Function:
Session-05: Section A. Internal Audit Operations (25%).
- Describe methodologies for the planning, organizing, directing, and monitoring of
internal audit operations. - Describe key activities for managing financial, human, and IT resources within the
internal audit function. - Describe the key elements required to align internal audit strategy to stakeholder
expectations. - Recognize the chief audit executive’s responsibilities for building relationships and
communicating with senior management and the board about various matters.
Session-06: Section B & C. Internal Audit Plan and Quality of the Internal Audit Function (30%).
- Identify sources of potential engagements.
- Describe the processes to develop a risk-based audit plan.
- Recognize the importance for internal auditors to coordinate with other assurance
providers and leverage their work. - Describe the required elements of the quality assurance and improvement program.
- Identify appropriate disclosure of nonconformance with The IIA’s Global Internal
Audit Standards. - Recognize practical methods for establishing internal audit key performance
indicators or scorecard metrics that the chief audit executive communicates to senior
management and the board.
Session-07: Section D. Engagement Results and Monitoring (45%).
- Recognize attributes of effective engagement results communication.
- Demonstrate effective communication of engagement results.
- Determine whether to develop recommendations, request action plans from
management, or collaborate with management to agree on actions. - Describe the engagement closing communication and reporting process.
Session-08: Section D. Engagement Results and Monitoring (N/A).
- Describe the chief audit executive’s responsibility for assessing residual risk for the
engagement. - Describe the process for communicating risk acceptance (when management has
accepted a level of risk that may be unacceptable to the organization). - Describe the process for monitoring and confirming the implementation of
management action plans. - Describe the escalation process if management has not adequately implemented an
action plan.