nerdexam
Isaca

CISA · Question #48

An IS audit manager was temporarily tasked with supervising a project manager assigned to the organization's payroll application upgrade. Upon returning to the audit department, the audit manager has

The correct answer is C. Outsource the audit to independent and qualified resources. The audit manager's prior involvement with the project creates a conflict of interest, necessitating outsourcing the audit to ensure independence and objectivity.

Submitted by khalil_dz· Apr 18, 2026Information System Auditing Process

Question

An IS audit manager was temporarily tasked with supervising a project manager assigned to the organization’s payroll application upgrade. Upon returning to the audit department, the audit manager has been asked to perform an audit to validate the implementation of the payroll application. The audit manager is the only one in the audit department with IT project management experience. What is the BEST course of action?

Options

  • ATransfer the assignment to a different audit manager despite lack of IT project management
  • BHave a senior IS auditor manage the project with the IS audit manager performing final review
  • COutsource the audit to independent and qualified resources
  • DManage the audit since there is no one else with the appropriate experience

How the community answered

(44 responses)
  • A
    25% (11)
  • B
    11% (5)
  • C
    59% (26)
  • D
    5% (2)

Why each option

The audit manager's prior involvement with the project creates a conflict of interest, necessitating outsourcing the audit to ensure independence and objectivity.

ATransfer the assignment to a different audit manager despite lack of IT project management

Transferring the assignment to a different audit manager lacking IT project management experience might compromise the quality of the audit, and it doesn't resolve the conflict of interest if the original manager still influences the audit process.

BHave a senior IS auditor manage the project with the IS audit manager performing final review

Having the audit manager perform a final review still presents a conflict of interest, as their prior involvement could influence their judgment or perceived impartiality, thereby undermining audit credibility.

COutsource the audit to independent and qualified resourcesCorrect

The IS audit manager's temporary supervision of the project manager constitutes a direct involvement with the project, creating a significant conflict of interest that compromises auditor independence. To maintain auditor independence and objectivity, which are foundational principles of auditing, the audit should be outsourced to independent and qualified external resources.

DManage the audit since there is no one else with the appropriate experience

Managing the audit directly would be a clear violation of auditor independence and objectivity principles, severely compromising the credibility and reliability of the audit findings.

Concept tested: Auditor independence and objectivity

Source: https://www.isaca.org/resources/isaca-journal/isaca-journal-archives/2015/volume-1/is-audit-objectivity-and-independence

Topics

#Audit independence#Conflict of interest#Audit competence#Outsourcing audit

Community Discussion

No community discussion yet for this question.

Full CISA Practice