The QAIP (Quality Assurance and Improvement Program) requires both ongoing monitoring and periodic assessments. Among these, ongoing monitoring is the mechanism that ensures continuous evaluation of whether engagements are being performed with quality and in conformance with the Standards.
Option A (periodic assessments) review effectiveness but are not continuous. Option C (external assessments) and Option D (SAIV) are broader and periodic, not engagement-level consistency checks.
Reference:
IIA Standards - Standard 1311: Internal Assessments.

Integration testing is a phase in the software development lifecycle (SDLC) where individual components or systems are combined and tested as a group to ensure they work together correctly.
Ensures Component Compatibility - Confirms that different software modules and hardware components function correctly when integrated.
Identifies Data Flow Issues - Ensures seamless communication between software systems, databases, and external applications.
Detects System-Wide Errors - Finds defects that unit testing (individual module testing) may miss.
Prepares for System Testing - Integration testing is conducted before full system testing to ensure subsystems work together as expected.
A). To verify that the application meets stated user requirements.
This refers to User Acceptance Testing (UAT), not integration testing.
B). To verify that standalone programs match code specifications.
This describes unit testing, where individual components are tested separately.
C). To verify that the application would work appropriately for the intended number of users.
This describes performance or load testing, which measures system behavior under high user load.
IIA's GTAG on IT Risks and Controls - Emphasizes the role of integration testing in ensuring secure and functional IT environments.
COBIT 2019 (Governance and Management of IT) - Recommends integration testing to reduce IT system failures.
ISO/IEC 25010 (Software Quality Model) - Lists integration testing as a key quality assurance step.
Why Option D is Correct?Why Not the Other Options?IIA References:

Indexing a progressive tax system to inflation requires adjusting tax brackets, deductions, and exemptions.
Without inflation indexing, nominal income may rise even though real purchasing power has not increased, pushing taxpayers into higher tax brackets. This is known as bracket creep. Adjusting brackets prevents inflation alone from increasing tax burden. Adjusting deductions and exemptions also preserves their real value. Tax filings are administrative documents and are not indexed. Tax payments and nominal tax receipts are outcomes, not structural tax-system elements. Internal auditors reviewing payroll, tax, or compensation controls should understand inflation indexing because it affects withholding, tax planning, and compliance calculations. Therefore, Option B is correct.

The auditor used an analytics tool to examine vendor payment transactions over 24 months and identify the top five vendors receiving the highest payments. This process involves examining, summarizing, and interpreting data, which falls under data analysis.
(A) Process analysis. #
Incorrect. Process analysis focuses on evaluating the workflow, efficiency, and control effectiveness of a business process, rather than analyzing data trends.
Example: Reviewing how invoices are processed to identify bottlenecks.
(B) Process mining. #
Incorrect. Process mining uses event logs and transactional data to analyze workflow patterns and deviations from standard procedures.
Example: Identifying inefficiencies in an invoice approval workflow.
(C) Data analysis. #
Correct. The auditor reviewed historical transaction data and extracted meaningful insights (i.e., the top five vendors by payment volume).
IIA GTAG - "Data Analytics: Elevating Internal Audit Performance" describes data analysis as using structured financial and operational data to identify trends, risks, or anomalies.
(D) Data mining. #
Incorrect. Data mining involves advanced statistical or machine learning techniques to discover hidden patterns in data, whereas data analysis focuses on summarizing and interpreting known data.
Example: Identifying fraudulent transactions using predictive modeling.
IIA GTAG - "Data Analytics: Elevating Internal Audit Performance"
IIA Standard 2320 - Analysis and Evaluation
COSO Framework - Data-Driven Internal Auditing
Analysis of Answer Choices:IIA References:Thus, the correct answer is C (Data analysis), as the auditor examined past transactions to summarize and interpret payment trends.