When a key control is identified during fieldwork that was not recognized during the planning phase, it is critical to update the audit work program to include tests for this newly identified control. However, this adjustment should be made with the approval of the engagement supervisor. This ensures that the changes are properly documented and that the scope and objectives of the engagement remain aligned with the overall audit plan. Additionally, obtaining approval from the engagement supervisor maintains the integrity and oversight of the audit process.
The Institute of Internal Auditors (IIA) Standard 2240 - Engagement Work Program: "Internal auditors must develop and document work programs that achieve the engagement objectives." IIA Practice Guide on "Engagement Planning"

* Professional Responsibility: Internal auditors are expected to demonstrate their commitment to professional standards and ethics.
* Code of Ethics: The IIA's Code of Ethics outlines principles that internal auditors must follow, including integrity, objectivity, confidentiality, and competency.
* Annual Declaration: Signing an annual declaration reinforces the auditor's commitment to these principles and ensures ongoing adherence to the professional standards.
* Demonstration of Due Care: By signing this declaration, auditors formally acknowledge their responsibility to uphold ethical standards, which is a demonstration of due professional care.
References:
The IIA's Code of Ethics.
The IIA's International Standards for the Professional Practice of Internal Auditing.

The corporate risk register is a comprehensive document that records identified risks, their assessment in terms of likelihood and impact, and the controls in place to manage them. It reflects the organization's attitude toward risk and highlights areas where achieving objectives may be difficult. The CAE should consult this resource to align the audit plan with the organization's risk profile and ensure that high-risk areas are appropriately audited. References:
* IIA Standards - 2010: Planning
* IIA Practice Guide - Risk Management

* Introduction:
* Due professional care requires auditors to plan, execute, and document their work meticulously, ensuring that their findings and conclusions are based on a thorough and objective assessment.
* Application of Due Professional Care:
* It involves following a structured approach to audit engagements to ensure that all necessary steps are taken to gather sufficient and appropriate evidence.
* Options Analysis:
* Option A: Detecting irregularities and noncompliance instances are outcomes of the engagement but do not inherently demonstrate due professional care.
* Option B: Lack of significant comments from the supervisor suggests quality but does not demonstrate the systematic approach needed for due professional care.
* Option C: Systematically planning, executing, and documenting audit procedures directly reflects the auditor's adherence to due professional care principles.
* Option D: While important, designing engagement objectives to assist the client does not cover the comprehensive nature of due professional care.
* Conclusion:
* The best demonstration of due professional care during an assurance engagement is the systematic planning, execution, and documentation of audit procedures.
Internal Audit Standards and Practice Guides

Self-assessment of controls can be efficiently conducted using various client-facilitated approaches. The choice of method depends on factors such as the size of the department, the nature of the controls, and the need for comprehensive feedback.
* Efficiency in Large Groups: Surveys are particularly effective for large groups (such as a 200-person department) as they allow for the collection of data from many individuals quickly and efficiently.
Reference: IIA Practice Guide on "Control Self-Assessment," which suggests using surveys for broad-based data collection when assessing control effectiveness across larger groups.
Standardized Feedback: Surveys provide standardized questions, ensuring consistent data collection and making it easier to analyze the responses.
Practical Example: A survey might include questions rating the effectiveness of different control measures on a scale, allowing management to identify areas of strength and weakness.
Anonymity and Honest Responses: Surveys can be conducted anonymously, encouraging more honest and candid feedback from employees who might hesitate to speak openly in workshops or interviews.
Advantage: This anonymity can lead to more accurate assessments of the controls' effectiveness, as employees might feel more comfortable pointing out issues without fear of repercussions.
Comparison to Other Methods:
Workshops (A): While useful for in-depth discussions, they are time-consuming and less efficient for large groups.
Interviews (C): Provide detailed insights but are also time-consuming and not practical for a 200-person department.
Observation (D): Useful for firsthand assessment but not efficient for gathering widespread feedback across a large department.
Conclusion: The correct answer is B, as surveys are the most efficient method for self-assessing the overall effectiveness of controls in a large department, offering a balance of broad coverage, standardized data, and anonymity.