IIA IIA-CIA-Part1 Practice Exams
Last updated on Oct 22,2026- Exam Code: IIA-CIA-Part1
- Exam Name: CIA Exam Part One: Essentials of Internal Auditing
- Certification Provider: IIA
- Latest update: Oct 22,2026
Which of the following is true regarding the stakeholder theory of corporate social responsibility?
- A . An organization has a fiduciary duty to put shareholders’ needs first
- B . Customers’ needs are the primary responsibility of the organization
- C . Competitors are considered stakeholders of the organization
- D . Employees are the organization’s best assets and primary responsibility
An internal auditor performed a consulting engagement last year which included assisting with management’s design of controls over the procurement function.
How should the chief audit executive plan an assurance engagement on the adequacy of the internal control system in the procurement function in the current year?
- A . Assign the engagement to another internal auditor on staff
- B . Outsource the engagement to ensure independence
- C . Harness the auditor’s knowledge of the procurement function by assigning the engagement to the same internal auditor
- D . Postpone the engagement to the following year to ensure enough time has passed since the controls were designed
Which of the following is most likely to be considered a control weakness?
- A . Vendor invoice payment requests are accompanied by a purchase order and receiving report.
- B . Purchase orders are typed by the purchasing department using prenumbered forms.
- C . Buyers promptly update the official vendor listing as new supplier sources become known.
- D . Department managers initiate purchase requests that must be approved by the plant superintendent.
Which of the following is most likely to be considered a control weakness?
- A . Vendor invoice payment requests are accompanied by a purchase order and receiving report.
- B . Purchase orders are typed by the purchasing department using prenumbered forms.
- C . Buyers promptly update the official vendor listing as new supplier sources become known.
- D . Department managers initiate purchase requests that must be approved by the plant superintendent.
Upon joining the internal audit activity, each new auditor receives a copy of the audit handbook.
Which of the following handbook policies has the greatest risk of compromising audit objectivity?
- A . Internal auditors should obtain 80 hours of continuing professional education every two years, 20 of which should be audit-related, and the remainder may be operations-related.
- B . Internal auditors should rotate to other areas of the organization for nonaudit assignments to gain an understanding of the organization’s operations.
- C . Internal auditors should have direct and unrestricted access to personnel and information throughout the organization and the governing board.
- D . Internal auditors should undergo annual performance appraisals conducted by the chief audit executive, who reports administratively to the chief financial officer.
Which of the following is most likely to impair the organizational independence of the internal audit activity?
- A . The chief audit executive (CAE) reports administratively to the chief financial officer.
- B . The CAE oversees the effectiveness of the organization’s risk management function.
- C . The CAE reports functionally to the CEO.
- D . The CAE managed the finance department for the past five years.
Which of the following is a preventive control the organization could implement to mitigate fraudulent activity in the accounts payable department?
- A . Delivering fraud awareness training to employees in the department.
- B . Segregating duties between employees in the department.
- C . Requesting the internal audit activity perform an independent evaluation of fraud risk in the department.
- D . Requiring accounts payable employees to sign a code of conduct awareness confirmation.
Which of the following is true about a system of internal control?
- A . Internal control should be updated at least annually.
- B . Technology does not change the internal control landscape.
- C . Strategy should fit the system of internal control.
- D . Articulating measurable objectives is part of internal control.
Which of the following is an example of the chief audit executive (CAE) demonstrating due professional care?
- A . The CAE relies on CAEs in other organizations to understand how due professional care should be executed in her internal audit activity
- B . The CAE meets with the board of directors on a quarterly basis to provide a status update.
- C . The CAE assesses the audit staff’s knowledge and skills annually to determine whether additional resources are needed to fulfill the internal audit plan.
- D . The CAE provides absolute assurance to line management during each eternal audit engagement
It describes the expectations for communicating the results of a quality assurance and Improvement program.
- A . 1 and 4 only.
- B . 3 and 4 only.
- C . 1.2. and 4.
- D . 2. 3. and 4.