The primary objectives of engagement supervision in internal auditing, according to IIA guidance, involve several key activities: identifying engagement objectives, assigning responsibilities to individual auditors, and approving the engagement program. These steps are essential to ensure that the audit is conducted effectively and that the objectives are met.
* IIA Standard 2340 - Engagement Supervision:
* This standard outlines the responsibilities of those supervising audit engagements. Supervisors must ensure that the audit is properly planned, that objectives are clearly defined, that the right personnel are assigned, and that the engagement program is appropriate for achieving the objectives.
* Key Activities in Supervision:
* Identifying Engagement Objectives: This is the first step in ensuring that the audit addresses the most important risks and areas of concern. The supervisor must ensure that these objectives are clear and aligned with the organization's goals.
* Assigning Responsibilities: Supervisors must ensure that tasks are allocated to auditors who have the appropriate skills and experience to carry them out effectively.
* Approving the Engagement Program: The engagement program outlines the procedures and steps that will be taken to achieve the audit objectives. The supervisor's approval ensures that the program is comprehensive and aligned with the audit's goals.
* IIA Practice Advisory 2340-1:
* The advisory emphasizes the role of the auditor in charge in providing guidance, ensuring that objectives are met, and that the audit is conducted efficiently and effectively.
* Option A (Enable training and development): While important, training and development are secondary objectives and not the primary focus of engagement supervision.
* Option C (Training and development): Again, while important, these are supportive activities rather than the core focus of engagement supervision.
* Option D (Training, development, and objectives): This option combines important activities but does not include assigning responsibilities, which is crucial in supervision.
Detailed Explanation:Why Not Other Options?

Non-assurance engagements, such as consulting activities, involve providing advisory services that add value to management without the auditor expressing a formal opinion or providing assurance on the effectiveness of controls or processes.
* IIA Definition of Non-Assurance (Consulting) Services:
* Non-assurance services, as defined by the IIA, are advisory and related client service activities.
These activities are intended to provide advice and insight into specific issues, such as potential risks in new initiatives, without the internal audit function expressing an assurance opinion.
* Consulting Engagements:
* In a consulting engagement, the internal audit activity provides information and recommendations to management, allowing them to make informed decisions. In this case, informing management about potential risks of moving the data warehouse to a cloud server is an advisory role, typical of a non-assurance engagement.
* IIA Standard 2120 - Risk Management:
* While this standard relates to risk management assurance, in a consulting role, the internal audit activity would inform management of risks, allowing them to manage these risks proactively.
* Option A (Assessing effects of changes in maintenance strategy): This is more aligned with an assurance engagement where the auditor evaluates the impact of changes.
* Option C (Ascertaining data center security compliance): This is an assurance activity focused on compliance.
* Option D (Ensuring equipment downtime risks are managed): This implies an assurance role, as it involves verifying compliance with internal policy.
Detailed Explanation:Why Not Other Options?Conclusion: Option B is correct as it reflects a typical non- assurance engagement where the internal audit function provides advisory services on risk without providing formal assurance.

Due professional care is a critical concept in internal auditing, ensuring that auditors conduct their work with the necessary diligence and competence.
* Definition and Standards: According to the IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 1220 - Due Professional Care, internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor.
Reference: Standard 1220 emphasizes that internal auditors must consider the extent of work needed to achieve the engagement's objectives and the cost of assurance in relation to potential benefits.
Expectation of Competence: The standard requires auditors to use their professional judgment and to exercise the level of skill and care that a reasonably prudent internal auditor would use in similar circumstances.
Practical Example: This includes evaluating the nature and complexity of the engagement, the adequacy and effectiveness of risk management, and control processes relevant to the engagement.
Comprehensive, Not Excessive: While due professional care involves being thorough, it does not mandate exhaustive procedures such as those implied in options A and C.
Clarification: Option A overstates the requirement by implying that all significant risks must be identified, which is not always feasible.
Clarification: Option C misinterprets due professional care by suggesting that extensive examinations and verifications to ensure fraud does not exist are always necessary, which is beyond the typical scope of many audits.
Cost vs. Benefit in Consulting: Option D refers to consulting engagements and the consideration of benefits over cost, which is a part of due professional care but does not capture the comprehensive expectation of care and skill.
Clarification: Due professional care in consulting engagements is about balancing benefits and costs but also involves ensuring quality and thoroughness appropriate to the engagement's objectives.
Conclusion: The correct answer is B, as it accurately reflects the IIA's guidance that internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor.

* A. A plan that focuses on furthering the independence of the internal audit activity:While independence is essential, it is not directly related to professional development planning, which addresses skill enhancement.
* B. A plan that ensures internal auditors collectively possess expertise in various fields to avoid outsourcing:This may be a benefit of professional development but is not its primary objective.
* C. A plan based on individual preferences and proposals, which helps internal auditors achieve greater success:This option emphasizes individual goals rather than aligning professional development with organizational needs.
* D. A plan that focuses on filling gaps in the current skills needed to complete audit objectives:Correct.
Professional development should address skill gaps to enhance the internal audit activity's ability to meet its objectives effectively.
CIA Exam Syllabus Reference:
Domain IV: Managing the Internal Audit Function - Professional Development and Resource Management.

To assist the board of directors in understanding the degree of ethics awareness within the organization, an organization-wide employee survey on ethical practices (option D) is the most effective action. Here's why:
* Direct Insight from Employees: Surveys can capture the perspectives of a broad employee base, providing direct insights into the awareness and attitudes towards ethics within the organization.
* Quantitative and Qualitative Data: A well-designed survey can gather both quantitative data (e.g., percentage of employees aware of the code of ethics) and qualitative data (e.g., specific instances of ethical dilemmas faced by employees).
* Identifying Areas of Improvement: Surveys can identify specific areas where employees feel the organization is lacking in terms of ethical practices, which can guide targeted improvements.
* Confidentiality and Anonymity: Surveys often ensure confidentiality and anonymity, encouraging more honest and comprehensive responses from employees, which might not be achievable through other means.
* Comprehensive Scope: Compared to internal audits or training, surveys can provide a comprehensive overview of the entire organization's ethical climate, from various departments and levels.
This approach aligns with the best practices in internal auditing and organizational assessments as outlined by the Institute of Internal Auditors (IIA) and other related guidance.