When the CAE determines whether the internal audit activity has confirmed the status of all management's corrective actions, it helps in assessing residual risk. Residual risk is the risk that remains after management's actions to mitigate inherent risk. By confirming the status of corrective actions, the CAE can evaluate whether the risks identified during the audit have been adequately addressed and what level of risk still exists, ensuring that the internal control environment is effective and that management's risk responses are appropriate.
COSO's Enterprise Risk Management Framework and The IIA's International Standards for the Professional Practice of Internal Auditing.

Comprehensive and Detailed Explanation:
The current ratio = Current Assets ÷ Current Liabilities. To increase it, either current assets must rise or current liabilities must decrease.
* Option A has no effect because it simply shifts funds between accounts.
* Option B increases current assets (inventory) without adding current liabilities, since the loan is long- term, thus improving the ratio.
* Option C (leasing) affects long-term liabilities, not current assets.
* Option D converts receivables to cash, which keeps current assets unchanged in total.
Therefore, the only option that improves the current ratio is purchasing inventory using long-term loans (B), since it raises current assets without raising current liabilities.

An The top-down approach to understanding business processes is conducted from a broad organizational perspective, beginning with the overall objectives and strategic goals of the organization and then drilling down into the specific processes that support these goals. While this approach ensures alignment with the organization's objectives, it has the greatest risk of overlooking critical processes at the lower levels, especially those that might be operationally significant but not directly linked to top-level objectives.
IIA References:
* IIA Standard 2010: Planning suggests that internal auditors should understand the organization's business processes in relation to its objectives. The top-down approach aligns with this but can risk missing important operational details that might be captured through a more granular (e.g., bottom-up) approach.

When deciding whether to report a finding, the sufficiency of the information is critical. Sufficiency refers to the quantity of information obtained to support audit conclusions and recommendations. In this case, the internal auditors need to ensure that the sample size and the evidence collected are adequate to demonstrate that the issue of employees signing purchase orders in a designated acting capacity due to employee absence is significant enough to report. Ensuring sufficiency helps validate that the finding is well-supported and justifies its inclusion in the audit report.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2310 - Identifying Information

One of the primary factors that could cause audit engagements to go over the planned budgeted hours is poor engagement supervision. Effective supervision ensures that the audit is progressing as planned, that issues are identified and addressed promptly, and that resources are used efficiently. Without proper supervision, audits may experience delays, scope creep, and inefficient use of time, leading to overruns in budgeted hours. Other factors, such as untimely follow-up and limited staff resources, can contribute to inefficiencies, but poor supervision is often a key driver.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2340 - Engagement Supervision