The external quality assessment must be performed at least once every five years. Therefore, the assessor must consider the frequency requirement when planning the review.
Option A is too narrow; the assessment evaluates conformance with the Standards, not just laws/regulations.
Option B is incorrect because assessors must be independent of the organization. Option C is incorrect; assessors may come from various professional backgrounds, not just accounting firms.
Reference:
IIA Standards - Standard 1312: External Assessments.

The IIA Standards emphasize that the internal audit plan must remain dynamic and responsive to changes in risks and priorities. If significant risks are identified after the plan has been approved, the CAE must revise the plan and communicate the interim changes to senior management and the board for review and approval.
Option A ignores emerging risks. Option C delays addressing significant risks. Option D bypasses governance approval and does not respect the board's oversight role.
Reference:
IIA Standards - Standard 2020: Communication and Approval.

Reference: IIA Business Knowledge for Internal Auditing, Cybersecurity and IT Risks section.

Reference: IIA Business Knowledge for Internal Auditing, Performance Management section.

Understanding Net Income Overstatement:
Net Income (NI) = Revenue - Expenses
If net income is overstated, then expenses must be understated or revenue must be overstated.
Cost of Goods Sold (COGS) is an expense that directly affects net income.
Why Understated COGS Causes Overstated Net Income:
COGS = Beginning Inventory + Purchases - Ending Inventory
If COGS is understated, expenses are lower than they should be, resulting in a higher net income.
Why Other Options Are Incorrect:
A). Beginning inventory overstated: This would increase COGS (not decrease it), leading to a lower net income.
C). Ending inventory understated: This would increase COGS, reducing net income.
D). COGS overstated: This would result in a lower net income, not an overstatement.
IIA Standards and References:
IIA Standard 2120 - Risk Management: Internal auditors must assess financial misstatements and risks.
IIA Practice Guide: Auditing Financial Statement Close Processes (2018): Emphasizes accuracy in inventory and expense reporting.
COSO Internal Control - Integrated Framework: Supports accuracy in financial reporting and controls over misstated financial data.
Thus, the correct answer is B: Cost of goods sold was understated for the year.