Case Studies & Practical Application Flashcards
7 cards from real Certified Internal Auditor practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Case Studies & Practical Application flashcards as text
An internal auditor learns through an anonymous tip that the CFO may be manipulating revenue recognition. The CAE informs the board audit committee chair privately. What is the most appropriate next step?
Answer: The audit committee should engage outside counsel and forensic auditors to investigate independently of management
Allegations involving senior management require independent investigation under the audit committee's direction, typically with outside experts, to avoid conflicts of interest.
An auditor is evaluating a company's anti-money laundering (AML) program and finds that 200 currency transaction reports (CTRs) were filed late over the past year. What is the primary concern?
Answer: Regulatory non-compliance that may result in significant fines and potential criminal liability
Late CTR filings violate Bank Secrecy Act requirements and can result in substantial civil and criminal penalties for the organization.
A manufacturing company's auditor reviews inventory controls and finds that cycle count adjustments average 8% of inventory value per month. What does this pattern indicate?
Answer: Significant control weaknesses in receiving, storage, or recording that require root cause investigation
Persistent high-value cycle count adjustments signal systematic control failures in inventory management processes, not a healthy counting program.
During a cybersecurity audit, an auditor finds that 35 former employees still have active network credentials 90 days after termination. What is the most significant risk?
Answer: Unauthorized access to systems and data by individuals with no legitimate business need
Active credentials for terminated employees represent an immediate unauthorized access risk and are a common source of insider threat and data breaches.
An auditor reviewing a government contractor's cost accounting finds that the company is allocating 100% of executive salaries to government contracts. The executives also work on commercial contracts. What is the primary concern?
Answer: Unallowable cost allocation that inflates charges to the government by attributing costs not exclusively incurred for government work
Allocating shared costs entirely to government contracts when executives support commercial work violates cost accounting standards and FAR, constituting potential false claims.
An internal auditor is observing a cash count at a retail branch. The branch manager asks the auditor to initial a preliminary count sheet before the final reconciliation is done. What should the auditor do?
Answer: Decline to initial and explain that the auditor is an observer, not a participant, to maintain independence
Initialing documents makes the auditor a participant rather than an independent observer, impairing objectivity and creating an appearance of complicity.
A financial services firm's auditor finds that traders are setting their own position limits and there is no independent risk management review. What is the most significant risk this control gap creates?
Answer: Traders can take on excessive risk without organizational oversight, potentially leading to catastrophic losses similar to rogue trading events
Self-set position limits without independent oversight remove a critical risk management control and create conditions for large unauthorized risk exposures.