Administering control questionnaires to individuals with primary responsibilities in the process can yield valuable information about processes and controls. However, one significant drawback is that the information gathered may be limited regarding the actual functionality of the controls. This approach relies on the respondents' knowledge and perceptions, which may not accurately reflect the effectiveness of the controls in practice. Moreover, respondents might not fully understand the auditor's intentions or may provide biased or incomplete information, thereby limiting the depth of insights into how controls function in real-world scenarios.
Reference:
IIA Standard 2201: Planning Considerations
IIA Practice Guide: Assessing the Adequacy of Risk Management Processes

According to IIA guidance, the chief audit executive (CAE) is directly responsible for establishing the objectives, scope, and plan for each engagement. This responsibility ensures that each audit is properly focused and aligned with the overall goals and risk areas of the organization. While maintaining a quality assurance program and providing professional development opportunities are important, they are not solely the CAE's responsibility without management support. Periodic review and approval of the internal audit charter is typically a joint responsibility with senior management and the board. Reference:
The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2010 - Planning.
The IIA's Practice Guide on Developing the Internal Audit Plan.

When auditing an organization's cash-handling activities, the most reliable form of testimonial evidence comes from a knowledgeable person who is independent of the cashiering duty. This independence ensures that the testimonial evidence is unbiased and not influenced by those directly involved in the processes being reviewed. Such evidence is considered more reliable as it is less likely to be affected by personal interests or biases.
Reference:
The Institute of Internal Auditors (IIA) Practice Guide: Evaluating Evidence IIA Standard 2310 - Identifying Information

For compliance engagements, particularly those related to critical processes such as cash disbursements, it is important to distribute the final audit report to individuals with oversight and decision-making responsibilities. The accounts payable manager oversees the process, the chief financial officer (CFO) has overall financial oversight, and the audit committee provides governance and oversight of the audit function. This ensures that the report is reviewed by those with the authority to implement changes and address any issues identified. Reference:
IIA Standards - 2440: Disseminating Results
IIA Practice Advisory - 2440-1: Disseminating Results

Utilizing an external fraud specialist in a suspected fraud investigation offers several advantages, particularly in preserving evidence and maintaining the chain of command. This is crucial for ensuring that the investigation is conducted legally and that any findings can be used in potential legal proceedings.
Detailed Explanation:
Expertise in Evidence Handling:
External fraud specialists typically have specific expertise in collecting, preserving, and documenting evidence in a manner that maintains its integrity. This includes maintaining a proper chain of custody, which is essential for legal admissibility.
IIA Practice Guide on Fraud Investigations:
The IIA suggests that involving specialists can enhance the credibility and effectiveness of an investigation. Specialists are trained to handle sensitive evidence and ensure that it is preserved correctly, reducing the risk of contamination or loss.
Chain of Command:
Maintaining a clear and secure chain of command during an investigation is critical. An external specialist is often better equipped to manage this process, ensuring that evidence is not tampered with and that all actions are documented appropriately.
Why Not Other Options?
Option A (Increased access to employees): While an external specialist may interview employees, this is not their primary advantage over internal auditors.
Option C (Increased ability to scrutinize processes): Specialists are skilled at this, but the key advantage lies in evidence preservation.
Option D (Increased access to software and data): Access to proprietary data is important, but internal auditors usually have this access as well.