According to the IIA guidance, the most appropriate next step when discovering a sales manager approving contracts beyond their authorization limit is to communicate the finding to the supervisor of the sales manager through an interim report. This approach ensures that the issue is addressed promptly and management can take immediate corrective actions to prevent further unauthorized activities. Including new contracts under negotiation in the final report would delay action, while reminding the sales manager of their authority limits does not escalate the issue appropriately.
IIA Standards: 2440 - Disseminating Results
IIA Practice Guide: Communicating Audit Results

* A. ICQs are most useful in more organic, decentralized organizations with specialized departmental or regional characteristics:ICQs are standard tools and can be used in a variety of organizational structures, not just decentralized ones.
* B. An ICQ can be used effectively either by sending it in advance for management of the area under review to complete or by testing each procedure and recording the results:Correct. ICQs are versatile tools that can be used for both self-assessment by management and as part of a detailed audit procedure.
* C. An ICQ is not an efficient tool, as it can only inquire about controls and it does not test them:ICQs can test controls indirectly by revealing whether they are documented and applied properly.
* D. ICQs are also known as checklist audits and encourage management of the area under review to answer "no" or "yes" more accurately:ICQs are not limited to a checklist format and their value goes beyond simple yes/no answers.
CIA Exam Syllabus Reference:
Domain V: Performing Internal Audit Services - Tools for Assessing Internal Controls.

According to the theory of constraints, the performance of any system is constrained by a few bottlenecks or limiting factors. These bottlenecks directly impact the organization's profitability because they limit the system's output, leading to reduced efficiency and effectiveness. Addressing these bottlenecks can lead to significant improvements in throughput, which in turn enhances profitability.
IIA References:
* The IIA's Practice Guide on Risk Management emphasizes understanding how various constraints within processes affect overall performance, including profitability. Bottlenecks are crucial factors that can either limit or boost profitability depending on how they are managed.

During the planning phase of an assurance engagement, one of the key supervisory activities is approving the audit work programs. This step ensures that the planned procedures are appropriate for achieving the engagement objectives and that the audit scope is adequately covered. Supervisory activities like ensuring alignment with engagement objectives, reviewing draft reports, and ensuring workpapers support findings typically occur during the fieldwork or reporting phases. Approving the audit work programs at the planning stage helps to ensure that the engagement is well-directed and thorough.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2200 - Engagement Planning

Root cause-based recommendations are most likely to propose long-term solutions. These recommendations address the underlying causes of issues rather than just the symptoms. By identifying and addressing the root causes, the solutions implemented are more likely to be effective in preventing the recurrence of the same or similar issues in the future.
* Root Cause Analysis: This involves a thorough investigation to identify the fundamental reasons for the occurrence of a problem. It goes beyond immediate symptoms to understand the deeper issues.
* Long-term Solutions: Recommendations based on root cause analysis focus on eliminating the underlying causes, leading to sustainable improvements and reducing the likelihood of repeat issues.
* Systemic Improvements: Addressing root causes often leads to changes in processes, controls, or organizational practices, resulting in broader and more lasting benefits.
By focusing on the root cause, the recommendations provide more robust and enduring solutions, contributing to the overall improvement and resilience of the organization.
The Institute of Internal Auditors (IIA) Standards
IIA Practice Guide: Root Cause Analysis in Internal Auditing