One disadvantage of using flowcharts during a risk assessment is that they may not capture serious risks that are not part of the linear process flow. Flowcharts are excellent tools for visualizing processes and identifying control points within a structured workflow. However, they might overlook risks that arise from non-linear interactions, external factors, or complex interdependencies that are not easily represented in a flowchart format. This limitation can result in an incomplete risk assessment if the auditor relies solely on flowcharts without considering other methods to identify all potential risks.
Institute of Internal Auditors (IIA), Practice Guide - Auditing the Control Environment.

Due professional care is a critical concept in internal auditing, ensuring that auditors conduct their work with the necessary diligence and competence.
* Definition and Standards: According to the IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 1220 - Due Professional Care, internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor.
Reference: Standard 1220 emphasizes that internal auditors must consider the extent of work needed to achieve the engagement ' s objectives and the cost of assurance in relation to potential benefits.
Expectation of Competence: The standard requires auditors to use their professional judgment and to exercise the level of skill and care that a reasonably prudent internal auditor would use in similar circumstances.
Practical Example: This includes evaluating the nature and complexity of the engagement, the adequacy and effectiveness of risk management, and control processes relevant to the engagement.
Comprehensive, Not Excessive: While due professional care involves being thorough, it does not mandate exhaustive procedures such as those implied in options A and C.
Clarification: Option A overstates the requirement by implying that all significant risks must be identified, which is not always feasible.
Clarification: Option C misinterprets due professional care by suggesting that extensive examinations and verifications to ensure fraud does not exist are always necessary, which is beyond the typical scope of many audits.
Cost vs. Benefit in Consulting: Option D refers to consulting engagements and the consideration of benefits over cost, which is a part of due professional care but does not capture the comprehensive expectation of care and skill.
Clarification: Due professional care in consulting engagements is about balancing benefits and costs but also involves ensuring quality and thoroughness appropriate to the engagement ' s objectives.
Conclusion: The correct answer is B, as it accurately reflects the IIA's guidance that internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor.

For internal audit findings and recommendations to be effectively implemented and to ensure that they receive adequate consideration, formal follow-up procedures are essential. According to IIA guidance, it is important that the internal audit activity not only reports the results to management but also ensures that corrective actions are taken or that management consciously accepts the associated risks.
* IIA Standard 2500 - Monitoring Progress:
* This standard requires that the chief audit executive (CAE) establish a process to monitor and ensure that management actions are effectively implemented or that risks are appropriately accepted. Follow-up is crucial for verifying that management has taken the recommended actions or has acknowledged and accepted the risk of not doing so.
* Formal Follow-Up Procedures:
* These procedures involve tracking the status of management's responses to audit recommendations, checking if actions were implemented as planned, and determining whether the intended outcomes were achieved. If management decides not to act, the CAE must ensure that the decision is documented and the associated risks are understood and accepted by senior management.
* IIA Practice Advisory 2500-1:
* This advisory emphasizes the importance of follow-up to ensure that significant audit findings and recommendations are addressed. Without this follow-up, there is a risk that important issues might be neglected or forgotten.
* Option A (Reporting results with recommendations): While reporting is important, it does not ensure that recommendations are acted upon.
* Option C (Quarterly reporting on audit plan focus): This is related to audit planning, not to ensuring that specific findings and recommendations are considered.
* Option D (Discussing findings with independent auditors): This might be useful, but it does not directly influence whether management considers and acts on the internal audit findings.
Detailed Explanation:Why Not Other Options?

Issuing an opinion on the overall effectiveness of internal control inherently carries the risk of increased audit risk and associated legal implications. This is because the opinion represents a high level of assurance, and any errors or omissions in the underlying audit work can lead to significant consequences, including potential legal liability. Therefore, auditors must be thorough and ensure that their conclusions are well-supported by the evidence obtained during the audit process.
The Institute of Internal Auditors (IIA) Practice Guide: Forming an Opinion on the Overall Adequacy and Effectiveness of Internal Controls IIA Standard 2400 - Communicating Results

To determine the additional cost that the company would incur to make a profit of $1.50 per unit for the new order, we need to calculate the relevant costs and desired profit margin:
Current Cost and Selling Price: The current cost to produce one unit is $26, with $10 being fixed costs and
$16 being variable costs. The product is usually sold for $30.
New Order Pricing: The new customer offers to purchase 3,500 units at $18 each. The company needs to make a profit of $1.50 per unit on this order.
Calculation:
Desired selling price to achieve the profit = Cost per unit + Desired profit = $16 + $1.50 = $17.50 Offered price by the customer = $18.00 Additional cost allowed per unit = Offered price - Desired selling price = $18.00 - $17.50 = $0.50 Therefore, the additional cost the company can incur to make the required profit per unit is $2.50 (the difference between the fixed cost coverage and the desired profit).
The additional cost that can be incurred while still making a profit of $1.50 per unit is $2.50