Comprehensive and Detailed Explanation From Exact Extract:
At the planning stage, auditors must organize and structure their work to ensure all necessary steps are covered. A checklist is the appropriate tool, as it provides a systematic list of tasks, reduces oversight, and helps manage workload. A control questionnaire (C) is used for assessing controls, and a fishbone diagram (D) is used for root cause analysis, not task management. Option A is irrelevant to planning execution.

Comprehensive and Detailed Explanation:
The three-way match (A) is the most effective control to ensure that services have been received and align with both requisition and invoicing. For temporary employees, this means verifying that hours worked or services provided match the purchase requisition and that an invoice is only paid if supported by documentation of services received.
* Option B (management approval) ensures authorization but not service completion.
* Option C provides clarity but is not a control for verifying actual work.
* Option D ensures budgetary compliance but does not prevent overpayment for unperformed services.
Thus, the strongest control is Option A, ensuring validity, accuracy, and completeness of vendor payments.

When developing a workpaper preparation policy, it is essential to ensure that all workpapers are directly related to the engagement objectives. The term "relevant" in this context means that the workpapers must be pertinent and appropriate to the audit engagement's objectives, ensuring that they support the findings, conclusions, and recommendations.
* IIA Standard 2330 - Documenting Information:
* This standard requires that internal auditors document relevant information to support engagement conclusions and recommendations. Relevance is key because it ensures that the documentation directly pertains to the objectives of the audit engagement.
* Relevance of Workpapers:
* Relevant workpapers are those that provide evidence and information that directly supports the audit's objectives. This relevance ensures that the audit's findings and conclusions are based on information that is applicable and directly related to the scope of the audit.
* IIA Practice Advisory 2330-1:
* The advisory suggests that workpapers should be organized and structured in a way that clearly relates to the audit objectives. Including a requirement for relevance in the workpaper policy helps ensure that all documented evidence is pertinent to the audit's goals.
* Option A (Understandable): While workpapers should be understandable, this does not directly address the need for workpapers to relate to the engagement objectives.
* Option C (Economical): Workpapers being economical refers to their efficiency in documentation, not their relevance to objectives.
* Option D (Complete): Completeness is important but refers to the extent of documentation rather than its relevance to specific objectives.
Detailed Explanation:Why Not Other Options?Conclusion: Option B is correct because including the requirement that workpapers be relevant ensures that they directly relate to the engagement objectives, aligning with IIA standards on documentation.

The CAE should discuss the concerns with the finance manager and work together to agree on the engagement objectives. This collaborative approach ensures that the engagement objectives are aligned with the finance manager's needs and expectations, and it allows the CAE to provide relevant and tailored assistance regarding the new management system for managing receivables.
:
IIA Standards: 2010 - Planning
IIA Practice Guide: Consulting Services

Detective controls are designed to identify and detect errors or fraud after they have occurred. Receipts for employee expenses serve as a detective control by providing evidence of transactions, enabling verification and review of expenses to identify any fraudulent or unauthorized activities. Awareness of prior incidents of fraud (Option A) is more of a preventive control, contractor non-disclosure agreements (Option B) are preventive controls to mitigate risks of information leakage, and verification of currency exchange rates (Option C) is more of a transaction control. References: IIA Glossary - Detective Controls, COSO Framework