What is the main difference between a consulting engagement versus an assurance engagement?

Question

Options

• AThe nature of services provided are defined in the internal audit charter.
• BInternal auditors must maintain objectivity while performing their work.
• CThe objectives and scope of the engagement typically are directed by management.
• DInternal auditors may assume management responsibilities.

• A
  5% (1)
• B
  5% (1)
• C
  15% (3)
• D
  75% (15)

Explanation

Option D is correct because the IIA Standards explicitly embed this prohibition within the very definition of consulting services: internal auditors provide advisory work "without the internal auditor assuming management responsibility." This language appears in consulting's definition precisely because the close, hands-on advisory nature of consulting creates conditions where auditors could drift into making decisions that belong to management - a line that must not be crossed. Assurance engagements carry no comparable explicit warning because the auditor's role is inherently observational and detached.

Why the distractors are wrong:

• A is wrong because the charter defines the broad mandate of internal audit (covering both engagement types), not what distinguishes one from the other.
• B is wrong because objectivity is required for both assurance and consulting - it's a universal standard, not a differentiator.
• C is tempting but secondary: yes, consulting scope is agreed with the client, but the primary distinguishing feature enshrined in the IIA definition is the prohibition on assuming management responsibilities, not just who directs scope.

Memory tip: "Consultants advise - they never decide." In a consulting engagement, the moment an internal auditor starts making management decisions rather than informing them, the engagement crosses a line the IIA Standards explicitly prohibit.

No community discussion yet for this question.