CIA-1 - Ethics and Professionalism - Section B.5

Demonstrate due professional care and professional skepticism, including assessing strategy, governance, costs versus benefits, and the probability of significant errors, fraud, or noncompliance.

Apply due professional care as the care and skill a reasonably prudent and competent internal auditor would exercise, weighing the assessment of the organisation's strategy and objectives, the adequacy of governance, risk, and control processes, and the cost of an engagement against its potential benefits. Maintain professional scepticism by keeping an unbiased mental attitude and critically assessing the reliability of information rather than accepting it at face value.

Due professional careProfessional skepticismCost-benefit assessment

Practice question for this objective

Free sampleEthics and Professionalismmedium

While planning an engagement at Sennen Logistics, the internal auditor must decide how much work to perform over two areas: a peripheral petty-cash process with minor exposure, and a core freight-pricing process central to the organisation's strategy and carrying significant risk. Exercising due professional care, how should the auditor allocate the depth of work?

  • AApply identical, maximum-depth procedures to both areas so that neither area can be said to have received less attention than the other.
  • BConcentrate the work on the petty-cash process because small balances are easier to test exhaustively and produce a cleaner engagement conclusion.
  • CSet the depth of work for both areas at whatever level keeps the engagement within its original time budget, irrespective of relative risk.
  • DDirect greater depth to the freight-pricing process, reflecting its strategic significance and its higher probability of significant error, while scaling petty-cash work to its lower risk. Correct
Due professional care directs the depth of work to areas most significant to strategy, objectives, and risk, weighing the probability of significant error rather than treating all areas equally. A reasonably prudent, competent auditor exercising due care considers the organisation's strategy and objectives, the adequacy of governance, risk management, and control, and the probability of a significant error, so effort is concentrated where exposure is greatest rather than spread uniformly or capped by the time budget.

Why A is wrong: Uniform maximum effort seems even-handed, but it ignores relative significance and the cost against benefit balance that due professional care requires.

Why B is wrong: Ease of testing is a poor guide to effort, and steering work toward a low-risk area leaves the significant freight-pricing risk under-examined.

Why C is wrong: Letting the time budget dictate depth is convenient, but due care is driven by significance and risk, not by fitting the work to a preset schedule.

Why D is correct: A prudent, competent auditor exercising due care weighs strategy, objectives, and the probability of significant error, concentrating effort where exposure to the organisation is greatest.

See more CIA-1 practice questions, answers explained.

More in this domain

Back to all Ethics and Professionalism objectives, or the CIA-1 cert hub.

Examworthy is not affiliated with or endorsed by The Institute of Internal Auditors. Original, blueprint-aligned practice material only.