When a key control is identified during fieldwork that was not recognized during the planning phase, it is critical to update the audit work program to include tests for this newly identified control. However, this adjustment should be made with the approval of the engagement supervisor. This ensures that the changes are properly documented and that the scope and objectives of the engagement remain aligned with the overall audit plan. Additionally, obtaining approval from the engagement supervisor maintains the integrity and oversight of the audit process.
The Institute of Internal Auditors (IIA) Standard 2240 - Engagement Work Program: "Internal auditors must develop and document work programs that achieve the engagement objectives." IIA Practice Guide on "Engagement Planning"

* A. The decision affects the test procedures performed:Correct. The choice between statistical and nonstatistical sampling affects the design of the sample selection, execution of audit procedures, and the nature of conclusions drawn. Statistical sampling involves probabilistic techniques that influence sample size and evaluation, whereas nonstatistical sampling relies on auditor judgment.
* B. The auditor's response to errors detected will be influenced:While error response is critical, it is influenced more by the nature and materiality of the errors than by the sampling approach.
* C. The competence of the evidence obtained is greater with statistical sampling:This is incorrect because the competence of evidence depends on the procedure itself, not the sampling method used.
Both methods can yield competent evidence if applied correctly.
* D. Nonstatistical sampling may be more cost effective:While this can sometimes be true, it is context- dependent and not universally applicable, so it is not the best answer.
CIA Exam Syllabus Reference:
Domain II: Risk Management and Control - Sampling Techniques and Audit Evidence.

When developing the objectives for an assurance engagement in a newly acquired subsidiary, the most critical items to consider are the organizational strategy, objectives, risks, control framework, and the expectations of stakeholders regarding the audit. This holistic approach ensures that the internal audit aligns with the broader goals and risk management processes of the organization, providing a comprehensive evaluation of the subsidiary's operations within the context of the entire entity.
* Organizational Strategy and Objectives: Understanding the overarching goals and strategic direction of the organization helps to align the audit objectives with business priorities and ensures that the subsidiary's operations are evaluated in the context of their contribution to these goals.
* Risks: Identifying and assessing the risks associated with the subsidiary is essential for focusing audit efforts on areas that could significantly impact the organization. This involves understanding both inherent and residual risks.
* Control Framework: Evaluating the existing control framework within the subsidiary helps determine the adequacy and effectiveness of controls in mitigating identified risks.
* Stakeholder Expectations: Considering what stakeholders expect from the audit helps in shaping objectives that address key concerns and provide valuable insights, fostering greater acceptance and implementation of audit recommendations.
This comprehensive approach ensures the audit is relevant, targeted, and capable of adding significant value to the organization by addressing key risk areas and strategic objectives.
The Institute of Internal Auditors (IIA) Standards
IIA Practice Guide: Formulating and Expressing Internal Audit Opinions

A compliance assurance engagement focuses on evaluating whether an organization is adhering to applicable laws, regulations, policies, and procedures. Assessing the design adequacy of controls related to consumer privacy and confidentiality is a prime example of such an engagement, as it ensures that the organization's controls are designed to comply with relevant privacy laws and regulations, thereby protecting consumer data and maintaining compliance.
The Institute of Internal Auditors (IIA) - Standards for the Professional Practice of Internal Auditing, Standard
2410 - Criteria for Communicating

Investment Portfolio Terms:
* Cash Cow: A business unit with a dominant market position in a mature, slow-growth industry that generates consistent positive cash flow and profits. It requires little investment to maintain its market position and provides funds for other investments.
* Star: A business unit with a high market share in a fast-growing industry. It requires significant investment to maintain its position and support further growth.
* Question Mark: A business unit with a low market share in a high-growth industry. It requires substantial investment to increase market share.
* Dog: A business unit with a low market share in a slow-growth industry, generating minimal profit or loss.
Characteristics of a Cash Cow:
* Dominant Position: The acquired organization has a strong market position.
* Mature Industry: The industry is mature with slow growth.
* Positive Financial Income: Consistently generates positive cash flow and profits, requiring minimal investment.
Investment Strategy:
* Portfolio Management: Investors typically use cash cows to fund other investments, maintaining a balanced portfolio that supports growth while providing stable returns.
References:
* The term "cash cow" accurately describes an organization with a dominant position in a mature, slow- growth industry that consistently generates positive financial income, fitting the investor's description.