An internal control questionnaire (ICQ) is best used to assess whether different subsidiaries apply centrally established procurement rules in the same manner because it helps gather structured responses from different units regarding their compliance with established policies.
* Receiving mid-level management insight on hiring practices (A) is better suited for interviews or surveys.
* Verifying adherence to approval matrices (B) requires observation and transactional testing rather than a questionnaire.
* Gaining assurance on inventory counts (C) would involve direct observation and reconciliation rather than an ICQ.
Reference:IIA's Practice Guide: Internal Audit and Fraud Risk Management - Use of Questionnaires in Control Assessments.

Audit criteria should be appropriate and specific to each audit assignment, considering the unique context and objectives of each engagement. Consistency across all audit assignments (Option A) is not always feasible or desirable, as it could lead to inappropriate assessments. Instead, criteria should be flexible to allow the identification of nonadherence, represent reasonable standards, and align with good management practices relevant to each specific audit.
IIA Standard 2201: Planning Considerations.
IIA Practice Guide on Audit Planning.

Contracts are typically drafted during the development phase of the contracting process. This phase follows the initiation and bidding phases and involves detailed negotiations and the preparation of formal agreements that outline the terms and conditions of the proposed business activity. This ensures that both parties have a clear understanding of their obligations and expectations before the contract is finalized and executed

The rotational model of internal audit staffing involves bringing in staff from other parts of the organization for a temporary period before they return to their original roles. While this model has several advantages, such as bringing diverse perspectives and business knowledge, it also has the disadvantage that auditors are often new to the internal audit function and are continuously in training.
* Rotational Model:
* In this model, employees from various departments are rotated into the internal audit activity for a specific period. They gain audit experience before rotating back to their original or other roles within the organization.
* Disadvantages:
* Since these individuals are not career auditors, they may lack the deep audit expertise of career auditors, and a significant amount of time is often spent on training. This constant influx of new, inexperienced staff can lead to a scenario where the team is always in training mode, potentially impacting audit efficiency and effectiveness.
* IIA Practice Advisory 1210-1:
* The advisory notes that while the rotational model can enhance business understanding within the audit team, it requires careful management to ensure that audit quality is not compromised due to the continuous learning curve of rotating staff.
* Option A (Career model): This involves auditors who remain in the internal audit function throughout their careers, leading to a highly skilled and experienced team.
* Option B (Center of competence model): This model focuses on a centralized group of audit experts, ensuring specialized skills and consistency.
* Option D (Hybrid model): This combines elements of the rotational and career models, aiming to balance expertise with fresh perspectives.
Detailed Explanation:Why Not Other Options?

To determine whether company vehicles are being used for personal purposes, the auditor needs location and route data of the vehicles in addition to the initial data extracted. This additional information would allow the auditor to track the specific routes and destinations of the vehicles, making it possible to identify patterns of use that do not align with business purposes, especially during weekends. The location and route data can help in pinpointing any non-business-related usage of the vehicles, providing evidence of personal use.
IIA Practice Guide: "Auditing Operational Activities"
COSO Internal Control - Integrated Framework