Which of the following statements is true regarding reporting results of the quality assurance and improvement program to senior management and the board?

Question

Options

• AInternal assessments must be reported to the board at least every five years
• BIf supported by assessment results, reporting provides assurance that internal auditors
• CFollowing the reporting the board must give the internal audit activity five years to correct any
• DA report, including the results of both internal and external assessments must be provided to the

• A
  3% (1)
• B
  81% (30)
• C
  11% (4)
• D
  5% (2)

Explanation

Option B is correct because IIA Standard 1320 states that the primary purpose of communicating QAIP results to senior management and the board is to provide assurance that the internal audit activity conforms with the Standards and is achieving its purpose - but only when the assessment results actually support that conclusion. The reporting is meaningful precisely because it is evidence-based, not automatic.

Why the distractors are wrong:

• A is incorrect because it confuses internal and external assessments. External assessments are required at least every five years; internal assessments (ongoing monitoring plus periodic self-assessments) occur more frequently and have no "every five years" reporting trigger.
• C is fabricated. The Standards impose no five-year window for the board to allow the IAA to correct deficiencies; remediation timelines are determined by the severity of findings and agreement with leadership.
• D is a distractor that sounds plausible but is incomplete or misleading as written - the Standards do not require a single combined report of both internal and external results delivered on a fixed schedule in one document to the board.

Memory tip: Think of QAIP reporting as a "seal of conformance" - the whole point is to tell the board "the auditors are auditing themselves and here's the proof they meet the Standards." If the results don't support that assurance, you can't claim it. Purpose = assurance of conformance, conditioned on the evidence.

No community discussion yet for this question.