Option D is correct. A balance sheet presents an organization ' s financial position at a particular point in time , showing assets, liabilities, and equity as of a specified date. By contrast, an income statement summarizes revenues and expenses over a period. An owner ' s equity statement explains changes in equity during a reporting period, and a statement of cash flows summarizes cash inflows and outflows over a period.
Therefore, none of Options A through C is principally a point-in-time financial statement. Finance and accounting concepts are expressly included in the current CIA Part 2 Internal Audit Engagement syllabus because auditors may need to interpret financial information when planning and performing engagements.
The distinction is therefore directly relevant to the exam domain, and D is the technically correct answer.

Understanding Staffing Models: Internal audit activity staffing models vary in structure and approach, each with its advantages and disadvantages. The rotational model involves assigning employees from various departments to the internal audit activity for a fixed period before they rotate back to their original or new roles within the organization.
Rotational Model Disadvantages:
* Continuous Training: A key disadvantage of the rotational model is that auditors are often new and in training. This model means that there is a constant influx of new staff who may lack extensive audit experience, requiring continuous training and development efforts.
* Consistency and Expertise: This can impact the consistency and depth of audit expertise within the internal audit activity, as the auditors are frequently changing.
Comparison with Other Models:
* Career Model: Auditors build long-term careers within the internal audit activity, leading to high levels of expertise and consistency.
* Center of Competence Model: This model involves a centralized team of audit professionals who provide specialized audit services across the organization, ensuring high levels of competence.
* Hybrid Model: Combines elements of multiple models to balance the benefits and mitigate the drawbacks of each approach.
References:
* The rotational model ' s major drawback of auditors always being new and in training highlights the challenges in maintaining a stable and highly skilled audit team. Continuous training efforts are required to ensure the effectiveness of this staffing model.

Comprehensive and Detailed Explanation:
The auditor's goal is to test compliance with a set threshold (daily meal stipend). The most direct technique is compliance verification through data analytics (A), which compares actual expenses against policy limits.
Regression analysis (B) is used to identify correlations, not compliance with fixed limits. Gap testing (C) identifies missing values in sequences, not threshold violations. Flowcharts (D) document processes but do not test compliance. Therefore, the best approach is to use compliance analytics to flag all transactions exceeding the approved stipend, providing reliable evidence of policy adherence or violation.

When an internal auditor finds that the incidents of noncompliance exceed the organization ' s acceptable tolerance level, this should be included in the final engagement report. In this case, the 8 out of 90 desks found with sensitive information represent an 8.9% noncompliance rate, which exceeds the organization ' s tolerance limit of 4%. Reporting this observation in the final engagement report ensures that management is informed and can take necessary corrective actions to address the noncompliance.
IIA Standards: 2410 - Criteria for Communicating
IIA Practice Guide: Reporting and Monitoring

During the planning stage of an assurance engagement, internal auditors should focus their attention on identifying and assessing inherent risks. Inherent risk is the risk of a material misstatement or noncompliance due to error or fraud that could occur before any controls are applied. Understanding inherent risk is crucial as it helps auditors identify areas that may need more extensive testing and ensures that audit resources are appropriately allocated to the highest risk areas.
The Institute of Internal Auditors (IIA) Practice Guide: Assessing the Adequacy of Risk Management Using ISO 31000 IIA Standard 2010 - Planning