Which of the following items related to the quality assurance and improvement program should the chief audit executive report to the board?

Question

Options

• AOngoing monitoring results
• BPeriodic management assessment results
• CAnnual risk assessment results
• DInternal auditors' training evaluation results

• A
  4% (1)
• B
  4% (1)
• C
  79% (19)
• D
  13% (3)

Explanation

Annual risk assessment results sit at the governance level - they give the board a comprehensive, periodic view of whether the internal audit function conforms with the IIA Standards, the Code of Ethics, and the Definition of Internal Auditing, which is exactly what boards need to fulfill their oversight responsibility over the quality assurance and improvement program (QAIP).

Why the distractors are wrong:

• A (Ongoing monitoring): Continuous, operational in nature - appropriate for management, not board-level reporting.
• B (Periodic management assessment): Self-assessments conducted by management are internal quality checks; results flow to management, not the board.
• D (Training evaluation results): Too granular and operational; evaluating individual auditor training is a management function, not a governance one.

Memory tip: Think "board = big picture, annual, conformance." The board cares whether internal audit as a whole meets professional standards - that's a periodic, risk-based, macro-level question. Anything labeled "ongoing," "management," or "training" is a lower-level operational item that stops at management.

No community discussion yet for this question.