According to IIA guidance, a request for an increase in the Chief Audit Executive's (CAE) salary for the next fiscal year should be submitted only to the CEO. Compensation matters typically fall under the purview of executive management rather than the board, as the board focuses on broader governance issues, including risk assessment, audit plans, and resource allocation. References: IIA Standard 1100 - Independence and Objectivity, IIA Practice Advisory 1110-1 - Organizational Independence

According to IIA guidance, monitoring customer quality complaints compared to the prior period to identify vendor issues is least likely to be a key financial control in an organization's accounts payable process. Key financial controls in accounts payable typically focus on preventing and detecting fraud and errors in the payment process, such as requiring approval for vendor changes, monitoring payment amounts, and comparing employee and vendor addresses to prevent fraud. Monitoring customer quality complaints is more relevant to quality control and vendor management rather than financial control.
:
IIA Standards: 2130 - Control
IIA Practice Guide: Auditing the Accounts Payable Process

The chief audit executive (CAE) is accountable for ensuring that adequate support exists for the conclusions and opinions formed by the internal audit activity. When relying on the work of external auditors, the CAE must ensure that the work is sufficient and appropriate to support the internal audit conclusions. This involves reviewing the external auditors' work to confirm its relevance and reliability, and integrating it into the internal audit processes as necessary.
:
The Institute of Internal Auditors (IIA) Standard 2050 - Coordination and Reliance.
IIA Standard 2340 - Engagement Supervision

Nonsampling risk refers to the risk that the auditor reaches an incorrect conclusion due to errors not related to the sample itself but to other factors such as misinterpretation of data, incorrect application of procedures, or human error.
* IIA Practice Advisory 2320-3:
* This advisory explains that nonsampling risk occurs when an auditor misinterprets results or applies the wrong audit procedure. It differs from sampling risk, which is the risk that a sample is not representative of the population.
* Misinterpretation of Sampling Results:
* In this case, the senior IT auditor misinterprets the sampling results during the audit of inventory valuation. This is a classic example of nonsampling risk, where the error is due to the auditor's misunderstanding or misapplication of the data, rather than an issue with the sampling process itself.
* IIA Standard 2320 - Analysis and Evaluation:
* This standard requires that auditors apply sufficient care and skill in analyzing and interpreting audit evidence. Nonsampling risk can occur if this standard is not met, resulting in incorrect conclusions.
* Option A (Sampling risk): This refers to the risk that the sample does not accurately represent the population, which is not the issue here.
* Option B (Control risk): This refers to the risk that a control will fail to prevent or detect errors or fraud, unrelated to this situation.
* Option D (Residual risk): This refers to the risk that remains after controls are implemented, also unrelated to this scenario.
Detailed Explanation:Why Not Other Options?Conclusion: Option C is correct as it accurately describes the situation where the auditor misinterprets the sampling results, which is a form of nonsampling risk, according to IIA guidance.

The engagement scope outlines the specific boundaries, focus areas, and activities that the internal audit will examine. The analysis of wire transfers exceeding $10,000 within a specified timeframe is a clear, specific task that defines what will be reviewed during the engagement, making it a typical element of an engagement scope.
IIA References:
* IIA Standard 2220: Engagement Scope states that the scope must be sufficient to satisfy the engagement's objectives and should outline specific areas and processes to be reviewed. Analyzing transactions over a certain threshold, like wire transfers exceeding $10,000, is a well-defined aspect of what the audit will cover.