CIA-2 domain - 10% of the exam

Engagement Supervision and Communication

Engagement Supervision and Communication is 10% of the CIA-2 exam. These are the objectives it covers, each with practice questions, with every answer explained.

The domain in numbers

33
Practice questions
2
Objectives
33
Medium

Where people go wrong

  • Sizing supervision by schedule, budget or auditee comfort

    The wrong answers tie the level of supervision to committee timing, auditee comfort, a fixed reviewer ratio, a larger budget or longer duration, or how often the audit committee wants updates. None of these describes the work or the people doing it. Supervision is scaled to the proficiency and experience of the assigned auditors against the complexity of the engagement. Lower experience on complex work calls for closer, more frequent direction and review, while a proven, reused programme tends to reduce the supervision needed.

    See it in a sample question
  • Repairing or escalating a workpaper gap instead of returning it

    The wrong answers deal with a conclusion that lacks recorded testing by signing it off on the auditor's judgement, having the supervisor reword the conclusion, or escalating straight to the chief audit executive. A conclusion backed only by a narrative description or a single interview is unsupported. Review confirms that evidence is sufficient, so the supervisor returns the workpaper with a review note, and the auditor documents the testing or obtains corroborating evidence such as transaction testing before the conclusion is finalised.

    See it in a sample question
  • Handling suspected senior-management fraud inside the engagement

    The wrong answers respond to suspected fraud by senior staff in ways that tip off the person involved or exceed the auditor's role: confronting the manager for an explanation, launching a forensic investigation, or designing a new approval control. They also hold the matter for the closing meeting or the normal reporting cycle. The correct answers escalate promptly through the chief audit executive or the established protocol to an appropriate senior party, and preserve the supporting evidence.

    See it in a sample question
  • Settling a dispute by dropping the finding or management's view

    The wrong answers settle a disagreement with management by dropping the finding to keep the relationship, excluding management's response from the report, or withholding results until management withdraws its objection. Others push a routine factual disagreement up to the audit committee. The correct answers evaluate any new evidence and amend the observation if it is relevant, sufficient and reliable. Where reliable evidence stands and the dispute is unresolved, the finding is reported with management's differing view noted.

    See it in a sample question

Objectives in this domain

What to study

The official documents this domain's practice questions cite most.

Sample questions from this domain

Free sampleEngagement Supervision and Communicationmedium

The extent of supervision that an engagement requires is best described as depending on which of the following?

  • AThe number of days remaining before the audit committee's next scheduled meeting.
  • BThe proficiency and experience of the internal auditors and the complexity of the engagement. Correct
  • CThe preference of the auditee for a lighter or heavier audit presence on site.
  • DA fixed organisation-wide ratio of one reviewer for every staff auditor on any engagement.
Recognise that the extent of supervision varies with the auditors' proficiency and the complexity of the engagement. The appropriate amount of supervision is not fixed; it increases when assigned auditors are less experienced or when the engagement is complex, and decreases when highly proficient staff handle straightforward work, so oversight is matched to the risk of unsupported conclusions.

Why A is wrong: Committee timing may pressure the schedule, but it does not determine how much direction and review the work itself needs; this confuses scheduling with supervision.

Why B is correct: Supervision is scaled to the competence of the staff assigned and the difficulty of the work; less experienced auditors on complex engagements need more direction and review.

Why C is wrong: Letting the auditee dictate supervision would compromise objectivity; the auditee's comfort is not a basis for setting the level of oversight.

Why D is wrong: A rigid fixed ratio ignores that supervision must flex with competence and complexity; a single mandated ratio cannot fit engagements of differing risk.

Free sampleEngagement Supervision and Communicationmedium

During workpaper review on a payroll audit at Calder Health, a supervisor finds a workpaper that states a conclusion of 'controls operating effectively' but contains only a narrative description of the control with no test steps or results recorded. What should the supervisor do first?

  • ASign off the workpaper because the auditor's professional judgement supports the stated conclusion.
  • BRewrite the conclusion to 'controls appear adequate' so it is more defensible given the limited documentation.
  • CReturn the workpaper to the auditor to document the testing performed and evidence supporting the conclusion. Correct
  • DEscalate the workpaper directly to the chief audit executive as a suspected competence failure by the auditor.
Workpaper review verifies that every conclusion is supported by documented testing and evidence, returning unsupported conclusions to the auditor for completion. A recorded conclusion must trace to documented procedures and results; when the support is missing the reviewer's role is to require the evidence be captured, not to approve or restate an unsupported judgement.

Why A is wrong: Tempting because judgement matters, but a conclusion without recorded testing is unsupported, and signing off would approve evidence that does not exist.

Why B is wrong: Tempting as a softer wording, but editing the conclusion masks the real gap, which is absent evidence, and the supervisor should not author the auditor's support.

Why C is correct: Correct: review confirms conclusions are supported by evidence; unsupported conclusions are returned for the testing and results to be documented before sign-off.

Why D is wrong: Tempting as accountability, but escalation is premature before the auditor is given the chance to complete the documentation the review identified.

Free sampleEngagement Supervision and Communicationmedium

During fieldwork on a procurement assurance engagement, an internal auditor at Harbourline Freight discovers evidence that a senior procurement manager appears to have approved payments to a shell vendor he secretly controls. The auditor is confident the evidence is reliable. What is the auditor's most appropriate next action?

  • AContinue testing the remaining procurement samples and record the finding in the draft engagement report for discussion at the closing meeting.
  • BPromptly escalate the suspected fraud to the chief audit executive so senior management and the board can be informed through the appropriate channel. Correct
  • CConfront the procurement manager directly to obtain his explanation before recording anything, so the finding is balanced.
  • DExpand the engagement scope to perform a full forensic investigation and quantify the total loss before communicating anything to anyone.
Suspected fraud involving senior management must be escalated promptly to the chief audit executive rather than deferred to routine reporting. Escalation exists precisely for matters beyond an engagement's scope and authority. Suspected senior-management fraud carries governance and legal consequences the auditor cannot manage alone, so prompt communication to the chief audit executive routes it to those responsible for deciding the response and preserving evidence.

Why A is wrong: Tempting because findings are normally aggregated for the report, but suspected senior-management fraud is a matter that must be escalated promptly, not held until a routine closing meeting.

Why B is correct: Suspected fraud involving senior management exceeds the engagement's scope and authority, so escalation to the chief audit executive for onward communication is the correct governed response.

Why C is wrong: Seeking auditee perspective is normally sound, but alerting a suspected fraudster prematurely risks concealment or destruction of evidence and is not the auditor's investigative role.

Why D is wrong: Quantifying loss feels thorough, but launching a forensic investigation unilaterally oversteps the engagement mandate and delays the escalation the situation urgently requires.

Free sampleEngagement Supervision and Communicationmedium

At an exit meeting, management disputes an observation and presents new evidence the auditor had not seen. Which response best reflects the purpose of the exit meeting in the communication process?

  • ARetain the observation unchanged because altering it after fieldwork would compromise the auditor's independence.
  • BEvaluate the new evidence and adjust the observation if it is relevant, sufficient, and reliable before finalising the report. Correct
  • CRemove the observation immediately to preserve a constructive relationship with the auditee going forward.
  • DRefer the dispute to the audit committee so that it decides whether the observation is factually accurate.
The exit meeting validates facts, so credible new evidence is evaluated and the observation adjusted before the report is finalised. The exit meeting exists to confirm accuracy and secure agreement; new evidence that is relevant, sufficient, and reliable is weighed on its merits so the final report reflects a correct and defensible position.

Why A is wrong: Tempting because independence is vital, but weighing new evidence and correcting a finding strengthens accuracy and does not compromise objectivity.

Why B is correct: Correct: the exit meeting validates facts, so credible new evidence is weighed and the observation is amended if warranted before the report is issued.

Why C is wrong: Tempting because rapport helps, but removing a finding merely to avoid friction sacrifices accuracy and the auditor's duty to report fairly.

Why D is wrong: Tempting because escalation exists, but a routine factual dispute is resolved through evidence at the exit meeting, not by handing fact-finding to the committee.

Other domains in this exam

See also the CIA-2 cert hub, the study guide, and the cheat sheet.

Examworthy is not affiliated with or endorsed by The Institute of Internal Auditors. Original, blueprint-aligned practice material only.