With regard to the internal audit activity's quality assurance and improvement program, which of the following must be reported to the board?

Question

Options

• AA statement of independence of the organization's internal auditors.
• BMeeting minutes with the assessment team, if key risks were identified and discussed.
• CFrequency of the quality assessments being performed.
• DSummary of previous internal assessments undertaken.

• A
  77% (44)
• B
  12% (7)
• C
  4% (2)
• D
  7% (4)

Explanation

Option A is mandated by IIA Standard 1321, which explicitly requires the Chief Audit Executive to confirm to the board, at least annually, the organizational independence of the internal audit activity - independence is a foundational governance matter the board is accountable for overseeing. Option B is incorrect because meeting minutes are internal working documents of the assessment process, not a required deliverable to the board. Option C is wrong because the frequency of assessments is a procedural detail governed by IIA standards (e.g., external assessments every five years), not something that must itself be escalated to the board. Option D is a distractor because while assessment results and conformance statements are communicated per Standard 1320, a historical summary of prior internal assessments is not a specifically required board-level report.

Memory tip: Link independence → board by thinking "the board guards independence." Just as the board oversees auditor independence in external audit (e.g., approving the external auditor), it must also receive the internal audit independence confirmation - making A the only choice tied to a direct, mandatory board-level obligation under the Standards.

No community discussion yet for this question.