Certified Internal Auditor (CIA) Foundations of Internal Auditing (Part 1) Syllabus

Foundations of Internal Auditing (Part 1) syllabus — full chapter and topic list

Expand any chapter to see its topics and sub-topics. This is the whole examinable outline for Foundations of Internal Auditing (Part 1) in Certified Internal Auditor (CIA), not a summary of it.

1. 1

   Purpose and Framework of Internal Auditing

   4 topics

   • Definition and Value Proposition
     • Assurance, insight, and objectivity
     • Distinguishing internal from external audit
     • Role in governance, risk, and control
   • The Global Internal Audit Standards
     • Domains, Principles, and Standards
     • Mandatory vs. recommended guidance
     • Topical and supplemental guidance
   • Mission and Guiding Principles
     • Integrity, competence, and due care
     • Objectivity and freedom from undue influence
   • Internal Audit Charter and Mandate
     • Purpose, authority, and responsibility
     • Board and senior management approval
2. 2

   Independence and Objectivity

   4 topics

   • Organizational Independence
     • Functional vs. administrative reporting lines
     • Direct interaction with the board
   • Individual Objectivity
     • Bias and impairments
     • Conflicts of interest and self-review threats
   • Safeguarding Independence
     • Disclosure of impairments
     • Auditor rotation and assignment
   • Consulting and Non-Audit Roles
     • Maintaining objectivity in advisory work
     • Limits on operational responsibility
3. 3

   Proficiency, Due Care, and Quality

   4 topics

   • Proficiency and Competencies
     • IIA competency framework
     • Use of specialists and external resources
   • Due Professional Care
     • Cost-benefit and reasonable assurance
     • Professional skepticism
   • Continuing Professional Development
     • Maintaining certification and skills
     • Emerging technology proficiency
   • Quality Assurance and Improvement Program
     • Internal assessments and ongoing monitoring
     • External assessments and independent validation
     • Reporting conformance to the board

Foundations of Internal Auditing (Part 1) flashcards for Certified Internal Auditor (CIA)

19 of 51 cards from the Foundations of Internal Auditing (Part 1) deck — real questions with worked answers.

1. How does the IIA define internal auditing?

   An independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of governance, risk management, and control processes.

2. What is the value proposition of internal auditing (the three pillars)?

   Insight, Objectivity, and Assurance. Internal audit enhances organizational value by providing objective assurance, advice, and insight to the board and management on governance, risk management, and control.

3. What three core processes does internal auditing evaluate and improve?

   Governance, risk management, and control processes.

4. What two broad types of services does internal audit provide?

   Assurance services (objective examination for an independent assessment) and consulting (advisory) services (advice and related client service activities).

5. In assurance engagements, who are the three parties involved?

   (1) The process owner / auditee (the party directly responsible for the entity, operation, or process), (2) the internal auditor making the assessment, and (3) the user (the party relying on the assessment, e.g., the board).

6. In consulting engagements, how many parties are typically involved and who are they?

   Two parties: the internal auditor providing the advice, and the engagement client/customer seeking and receiving the advice.

7. What is the name and effective date of the IIA's current authoritative guidance framework?

   The Global Internal Audit Standards, released January 9, 2024, and effective January 9, 2025 (replacing the International Professional Practices Framework's prior Standards, Definition, Code of Ethics, and Core Principles).

8. What are the five Domains of the Global Internal Audit Standards?

   Domain I: Purpose of Internal Auditing; Domain II: Ethics and Professionalism; Domain III: Governing the Internal Audit Function; Domain IV: Managing the Internal Audit Function; Domain V: Performing Internal Audit Services.

9. How are the Global Internal Audit Standards structured beneath the Domains?

   Domains contain 15 Principles, which contain Standards. Each Standard includes Requirements (mandatory) plus Considerations for Implementation and Examples of Evidence of Conformance (non-mandatory guidance).

10. Within the Global Internal Audit Standards, which elements are mandatory?

    The Requirements stated within each Standard are mandatory. The 'Considerations for Implementation' and 'Examples of Evidence of Conformance' are recommended but not mandatory.

11. What are the five Ethical Principles in the Global Internal Audit Standards (Domain II)?

    Integrity, Objectivity, Competency, Due Professional Care, and Confidentiality.

12. What is the Mission of Internal Audit?

    To enhance and protect organizational value by providing risk-based and objective assurance, advice, and insight.

13. Under the Global Internal Audit Standards, what is the Purpose of Internal Auditing (Domain I)?

    Internal auditing strengthens the organization's ability to create, protect, and sustain value by providing the board and management with independent, risk-based, and objective assurance, advice, insight, and foresight.

14. What four value-adding outputs does internal auditing provide to the board and management under Domain I?

    Assurance, advice, insight, and foresight.

15. What is an internal audit charter?

    A formal document that defines the internal audit function's purpose, authority, responsibility, and position within the organization, including the nature of assurance and consulting services and the reporting relationships.

16. Who approves the internal audit charter?

    The board approves the internal audit charter (developed by the chief audit executive in discussion with senior management and the board).

17. What key elements must the internal audit charter establish?

    The function's purpose and mandate; authority (including access to records, personnel, and assets); responsibilities; the dual reporting relationships of the CAE; and the requirement to conform with the Global Internal Audit Standards.

18. What is the internal audit 'mandate'?

    The internal audit function's authority, role, and responsibilities, granted by the board and senior management, as set out in the charter. It defines the types of services provided and the function's standing in the organization.

19. How often should the internal audit charter be reviewed?

    The chief audit executive should periodically review the charter (at least annually is recommended) and present it to senior management and the board for approval.

See more Foundations of Internal Auditing (Part 1) flashcards →

Planning Foundations of Internal Auditing (Part 1) for Certified Internal Auditor (CIA)

Foundations of Internal Auditing (Part 1) (Certified Internal Auditor (CIA)) FAQ