Quality Assurance and Improvement Program (QAIP)

1. According to the IIA Standards, which components must a Quality Assurance and Improvement Program include to evaluate the internal audit activity?

• A.Ongoing monitoring and periodic assessments are both required so the internal audit activity can evaluate conformance and pursue improvement.✓ Correct
• B.Only an externally led quality assessment is required because internal monitoring does not count toward QAIP requirements under the Standards.
• C.A current internal audit charter and annual risk assessment alone satisfy QAIP requirements because they define purpose and engagement priorities.
• D.A rotating review of financial reporting controls and a whistleblower hotline together satisfy QAIP requirements because they test organizational ethics.

2. When scoping a QAIP for a combined assurance model, which approach best ensures the internal audit activity meets Standard 1300 expectations?

• A.Map internal audit responsibilities alongside other assurance providers, explicitly defining coverage boundaries and coordination mechanisms in the QAIP scope document.✓ Correct
• B.Exclude other assurance providers from the QAIP scope entirely because Standard 1300 forbids assessing activities outside internal audit's direct control.
• C.Rely only on periodic external peer reviews for all assurance providers and omit internal mapping to save resources while satisfying Standard 1300.
• D.Include only financial assurance areas in the QAIP scope since Standard 1300 principally addresses financial statement audit quality requirements.

3. How should an internal audit leader apply the 'Check' phase of the Deming Cycle within a QAIP to improve audit quality?

• A.Use defined performance metrics and review completed engagements to evaluate results versus planned objectives, then report findings to governance for action.✓ Correct
• B.Immediately replace all current audit methodologies without assessing outcomes, because rapid changes ensure continuous improvement under the Deming Cycle.
• C.Skip measurement and rely exclusively on anecdotal feedback from senior management as the primary ‘Check’ activity for QAIP effectiveness.
• D.Limit the 'Check' activities to informal team discussions and avoid documenting results since documentation slows down the improvement process.

4. An audit found recurring control failures. Which PDCA-based action best demonstrates the 'Act' phase to close the improvement loop in the QAIP?

• A.Revise policies and update audit procedures, train staff on new expectations, and incorporate the changes into subsequent planning and monitoring activities under the QAIP.✓ Correct
• B.Document the failure in a single file and defer any procedural changes until the next annual planning cycle to avoid disrupting current engagements.
• C.Remove the affected control owners from the scope of future audits to reduce recurrence statistics and avoid repeating the issue in QAIP reports.
• D.Rely solely on management to implement fixes without verifying completion or effectiveness, because responsibility lies with operations not internal audit.

5. Which approach correctly distinguishes ongoing monitoring from periodic self-assessments within a QAIP per Standard 1311?

• A.Ongoing monitoring uses continuous, built-in processes such as supervision and dashboards, while periodic self-assessments are scheduled, in-depth reviews of conformance and practices.✓ Correct
• B.Ongoing monitoring only occurs during external reviews, whereas periodic self-assessments are continuous daily checks performed by all audit staff.
• C.Periodic self-assessments replace ongoing monitoring entirely and should be used exclusively to meet Standard 1311 obligations to save resources.
• D.Ongoing monitoring and periodic self-assessments are identical activities with different names and therefore should be reported the same way in the QAIP.