CIA-1 - Foundations of Internal Auditing (35% of the exam) - Section A.1
Describe the purpose of internal auditing according to the Global Internal Audit Standards, including the overall objectives and benefits of the internal audit function.
Explain why an internal audit function exists: to strengthen an organisation's ability to create, protect, and sustain value by providing the board and senior management with independent, risk-based, and objective assurance, advice, insight, and foresight. Identify the conditions that make the function effective, such as an appropriate mandate, sufficient resourcing, and organisational independence, as framed by the 2024 Global Internal Audit Standards.
Global Internal Audit StandardsPurpose of Internal AuditingInternational Professional Practices Framework
Practice question for this objective
lock_openFree sampleFoundations of Internal Auditingeasy
Northwind Logistics has just established its first internal audit function. The audit committee chair asks the newly appointed chief audit executive to state, in one sentence, what internal auditing is fundamentally there to achieve so the mandate can be finalised. Which statement best reflects the purpose of internal auditing under the Global Internal Audit Standards?
ATo detect and investigate fraud on behalf of the board, taking the lead role whenever a suspected irregularity is reported anywhere within the organisation.
BTo prepare and operate the organisation's system of internal controls so that management can rely on those controls when reporting to the board and to regulators.
CTo guarantee that the organisation meets every financial target and that no material risk will ever crystallise during the coming reporting period.
DTo strengthen the organisation's ability to create, protect, and sustain value by providing the board and senior management independent, risk-based, and objective assurance and advice.check_circle Correct
The purpose of internal auditing is to strengthen the organisation's ability to create, protect, and sustain value through independent, objective assurance and advice. The 2024 Global Internal Audit Standards open with a Purpose statement: internal auditing strengthens the organisation's ability to create, protect, and sustain value by delivering independent, risk-based, objective assurance and advice to the board and senior management. Owning controls or investigations would defeat that independence.
Why A is wrong: Fraud detection is tempting because auditors do consider fraud risk, but leading investigations is a management responsibility; internal audit coordinates and supports rather than owning the investigation, so this misstates the purpose.
Why B is wrong: Designing and operating controls is a first line management task; if internal audit owned it, the function could not independently assure it later, so this confuses the purpose with a management duty.
Why C is wrong: Guaranteeing outcomes overstates what assurance can offer and uses an absolute claim no function can honour, so it mischaracterises the purpose, which is about strengthening value, not eliminating all risk.
Why D is correct: This mirrors the Purpose of Internal Auditing in the Global Internal Audit Standards, framing value creation, protection, and sustaining alongside independent, risk-based, objective assurance and advice to the board and senior management.
Answers that look right on this material and are not. Each one is a distractor from a different question in the CIA-1 bank for this domain.
That internal audit duplicates the risk management team's work as a safety net, repeating the same assessments so any error by the second line is caught a second time.
errorWhy it is wrong: Framing internal audit as duplication misreads the Three Lines Model; the function provides independent assurance over the second line's work rather than repeating it, so this understates and mislabels its contribution.
Internal auditing expresses a formal opinion on whether the financial statements are fairly presented, chiefly for the benefit of shareholders, lenders, and other external users.
errorWhy it is wrong: This is tempting because both functions examine controls and evidence, but issuing an opinion on the financial statements for external users is the purpose of the external auditor, not internal auditing.
A signed agreement that the finance director will approve each engagement before it begins, so that audit work always aligns with the priorities of the finance team.
errorWhy it is wrong: Letting a single executive approve every engagement sounds collaborative but lets management direct the plan, impairing independence; this weakens the very condition the chief audit executive needs, so it is wrong.