* A. Vouching vendor invoices to payments made:This verifies payment accuracy but does not confirm whether purchases were authorized.
* B. Sorting invoices by purchase orders and comparing for successive duplicate invoices:This approach focuses on detecting duplicate invoices, not authorization.
* C. Comparing a random sample of vendor invoices to purchase orders:Correct. This method directly matches invoices to purchase orders, confirming that purchases were authorized and appropriately documented.
* D. Sorting payments by invoice to detect successive duplicate invoices:Similar to option B, this approach focuses on detecting duplicates rather than verifying authorization.
CIA Exam Syllabus Reference:
Domain V: Performing Internal Audit Services - Testing for Authorization and Validity.

Comprehensive and Detailed Explanation:
An integrated audit approach combines multiple assurance activities (operational, compliance, financial, IT, etc.) into one cohesive engagement. This reduces redundancy, avoids duplicated testing, and minimizes audit fatigue for management and staff. Option A is incorrect because audit conclusions must remain objective, not subjective. Option C is too narrow, as integrated audits go beyond regulatory compliance. Option D is misleading, since integration is about efficiency and coverage, not resource expansion. By integrating multiple areas of risk and control into one engagement, the internal audit function provides a more holistic view, improves efficiency, and reduces the burden on audited departments. Thus, the key benefit is minimizing audit fatigue (B) while maintaining assurance coverage.

The CIA Exam (Part 2 - Practice of Internal Auditing) requires auditors to identify the root causes of issues and deviations from criteria, not just report symptoms. A root cause analysis seeks the underlying reason for a problem, rather than describing its occurrence.
* Option A simply describes the condition (missing results).
* Option B identifies a trend but not the underlying cause.
* Option D shifts responsibility to employees without addressing why results were not saved.
* Option C identifies a system design flaw that prevents employees from saving results, which is a true root cause.
Therefore, including Option C in the audit report demonstrates compliance with internal audit methodology, as it highlights the underlying systemic problem instead of merely documenting symptoms or assigning blame.

The most important determinant of the objectives and scope of assurance engagements is the preliminary risk assessment performed by internal auditors. This assessment identifies the key risks that the engagement should address and ensures that the audit is focused on areas of highest risk and significance to the organization. While organizational charts, business objectives, and management requests are important inputs, the internal auditors' preliminary risk assessment ensures that the audit addresses the most critical areas.
References:
* The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2210 - Engagement Objectives.
* The IIA's Practice Guide on Engagement Planning.

An operational audit is conducted to evaluate whether an organization's processes or areas are performing as intended, accomplishing their objectives, and doing so in an efficient and economical way. This type of audit focuses on the effectiveness, efficiency, and economy of operations.
* IIA Definition of Operational Auditing:
* Operational auditing involves reviewing and assessing the effectiveness and efficiency of operations. The goal is to ensure that the organization's operations are running as intended and achieving their objectives in a cost-effective manner.
* IIA Standard 2100 - Nature of Work:
* This standard emphasizes that internal audit activity should evaluate the effectiveness and efficiency of operations, aligning with the objectives of an operational audit.
* Key Aspects of Operational Audits:
* Effectiveness: Evaluates whether objectives are being met.
* Efficiency: Assesses whether resources are being used optimally.
* Economy: Ensures that costs are minimized without compromising quality or performance.
* Option A (Compliance audit): Focuses on whether the organization adheres to laws, regulations, and policies, not on operational efficiency.
* Option C (Financial audit): Involves verifying the accuracy of financial records, not the operational performance.
* Option D (Provider audit): This term is not commonly used in IIA guidance and does not accurately describe the scenario.
Detailed Explanation:Why Not Other Options?