Which statement is accurate regarding reporting on the quality assurance and improvement program (OAIP) to conform with the International Standards for the Professional Practice of Internal Auditing?

Question

Options

• AThe chief audit executive (CAE) should report all stages of the OAlP's development and key
• BThe CAE should report only corrective action plans that meet external assessor or stakeholder
• CThe CAE should establish the form and content of program communication so that it is in
• DThe CAE should disclose program details only after both internal and external assessments have

• A
  19% (6)
• B
  3% (1)
• C
  9% (3)
• D
  69% (22)

Explanation

Option D aligns with IIA Standard 1320, which requires the CAE to communicate QAIP results - including findings from both internal and external assessments - to senior management and the board before disclosing them more broadly; this ensures completeness and accuracy before program details are shared. Option A is incorrect because the CAE is not required to report every stage of the program's development - the standard focuses on communicating assessment results, not ongoing progress updates. Option B is wrong because restricting communication solely to corrective action plans omits required disclosures such as assessor qualifications, scope, frequency, and overall conclusions. Option C is a tempting distractor because while the CAE does have responsibility for communicating QAIP results, the form and content must conform to the Standards themselves, not be freely established by the CAE's own preferences.

Memory tip: Think of QAIP reporting as a "both/and" requirement - the CAE must cover both internal and external assessments before disclosure is considered complete. If an answer limits reporting to only one side (just corrective actions, just development stages, or just CAE-defined content), it's likely wrong.

No community discussion yet for this question.