During an IT general controls audit of a high-risk area where both internal and external audit teams are reviewing the same areas simultaneously, which of the following is the BEST approach to optimize resources?
During an IT general controls audit of a high-risk area where both internal and external audit teams are reviewing the same areas simultaneously, which of the following is the BEST approach to optimize resources?
In an IT general controls audit, especially in high-risk areas, it is essential to optimize resources and avoid duplication of efforts between internal and external audit teams. By leveraging the work performed by the external audit team for internal audit testing, internal auditors can focus their resources on areas not adequately covered by the external auditors. This approach allows for more efficient use of resources and maximizes the comprehensiveness of the audit without unnecessary redundancy.
Requesting that the external audit team leverage the internal audit work is the most efficient approach to optimizing resources in this scenario. This approach allows for collaboration and coordination between the internal and external audit teams, reducing duplication of efforts and maximizing the use of available resources.
Why have contradicting answers and not state which you feel is the most correct?
A: By leveraging the work performed by the external audit team, the internal audit team can reduce duplication of effort and focus their resources on areas that have not been adequately covered by the external auditors. This allows for more efficient use of resources and avoids unnecessary redundancy.
Your internal risk approach may be different then external auditors. In that case you can check an other risky area and depend on external auditors paper work for the same area. You may use different test of design approach from external audit for additional assurance. Answer is clearly A. External auditors may use internal audits finding, evidences or paper work for their own audit work (Eg: SOX). But you cant specifically request it and effect their independence, its at their own accord
A is the correct answer Generally, given the nature of internal and external audits, option A, "Leverage the work performed by external audit for the internal audit testing," is often the default choice, as external audits are typically more comprehensive and rigorous, and their findings are designed to be used by a broad range of stakeholders, including internal auditors. But again, this can depend on the specifics of the situation.
but internal auditors may become overly reliant on external findings without conducting their own assessments
As the question is taking about high-risk areas, the control would be tested by both teams. However, if it would have been a low-risk control, then the external auditor can rely on the IAs work or vice versa
One of the primary objectives of every audit program is to produce enough dependable evidence using internal auditors to reduce the financial burden of using external auditors.
why not B
why not b
its a duplication of work. Overall, assurance providers' works should be adequately planned to efficiently use the available resources
I also thought it would be B
Using a prototyping approach in software development allows stakeholders to visualize and interact with a working model of the software early in the development process. This helps in conceptualizing and clarifying requirements, ensuring that the final product meets the needs and expectations of the users.
Keyword should be "high risk", not "cost effective"
the keyword is "optimize" which means A
Since external audits are always performed, the results of those audits can be used for internal audits to reduce duplication of resources.
leverage the work of external auditors, not the other way around
ISMS,QMS etc