Reference: IIA Business Knowledge for Internal Auditing, Web Server Security section.

According to the IIA Standards, follow-up is mandatory only for assurance engagements, where corrective action plans are agreed and tracked. Advisory services are intended to add value and offer recommendations but do not require formal follow-up by internal audit. Responsibility for implementing recommendations lies with management.
Options A and B improperly delegate follow-up responsibilities, and Option D incorrectly suggests mandatory follow-up for advisory engagements.
Reference:
IIA Standards - Standard 2500: Monitoring Progress (applies to assurance, not advisory services).

* Role of a Witness in Contract Signing:
* A witness is a neutral third party who observes the signing of a contract and confirms that the named individuals actually signed the document.
* This helps prevent disputes regarding the authenticity of signatures and provides legal proof of agreement.
* Why Signature Validation is the Primary Role:
* Ensures legitimacy: A witness confirms that the signatures belong to the stated individuals, preventing forgery.
* Legal enforceability: Many jurisdictions require witnesses for contracts to be legally binding in certain cases (e.g., wills, real estate agreements).
* Provides evidence in case of disputes: If a signatory later denies signing, the witness can testify to the authenticity of the signature.
* Why Other Options Are Incorrect:
* A. A witness verifies the quantities of the copies signed - Incorrect.
* A witness does not count copies; their role is to verify authentic signatures.
* B. A witness verifies that the contract was signed with the free consent of the promisor and promisee - Incorrect.
* While witnessing may imply that parties were present, it does not guarantee free consent (coercion concerns require separate legal evidence).
* C. A witness ensures the completeness of the contract between the promisor and promisee - Incorrect.
* Contract completeness is a legal or managerial responsibility, not a witness's role.
* IIA's Perspective on Contract Verification and Internal Controls:
* IIA Standard 2120 - Risk Management requires internal auditors to ensure proper contract validation and documentation.
* COSO Internal Control Framework highlights the importance of contract controls, including witnessed signings for fraud prevention.
* International Contract Law Principles emphasize the role of witnesses in reducing contract disputes.
IIA References:
* IIA Standard 2120 - Risk Management in Contract Management
* COSO Internal Control Framework - Legal Documentation and Witnessing
* International Contract Law Principles - Witnessing Signatures for Legal Validity Thus, the correct and verified answer is D. A witness validates that the signatures on the contract were signed by the promisor and promisee.

Comprehensive and Detailed Step-by-Step Explanation with all IIA References: = Understanding the Impact of an Understated Ending Inventory:
Ending inventory is a key component of the cost of goods sold (COGS) calculation:
COGS=BeginningInventory+Purchases#EndingInventoryCOGS = Beginning Inventory + Purchases - Ending InventoryCOGS=BeginningInventory+Purchases#EndingInventory If the ending inventory is understated, it means the reported inventory is lower than its actual value.
This results in an overstated COGS because a smaller amount is subtracted in the formula above.
An overstated COGS leads to an understated net income in the current year.
Effect on the Following Year's Income Statement:
The beginning inventory for the next year is based on the ending inventory of the previous year.
Since the prior year's ending inventory was understated, the new year's beginning inventory is also understated.
A lower beginning inventory leads to a lower COGS in the new year.
Since COGS is lower, net income in the following year will be overstated.
IIA's Perspective on Financial Reporting Errors:
The IIA's International Standards for the Professional Practice of Internal Auditing (IPPF) emphasize the importance of accurate financial reporting.
IIA Standard 1220 - Due Professional Care requires internal auditors to consider the probability of errors, fraud, or misstatements in financial reporting.
COSO's Internal Control - Integrated Framework highlights that inventory valuation errors can impact financial integrity and decision-making.
GAAP & IFRS Accounting Standards also require proper inventory reporting to ensure accurate financial statements.
IIA References:
IPPF Standard 1220 - Due Professional Care
COSO Internal Control - Integrated Framework
GAAP & IFRS Accounting Principles on Inventory Valuation
Thus, the correct and verified answer is C. Net income would be overstated.

A risk-based audit plan must be aligned with the organization's objectives and risk management system.
According to the Standards, the CAE must consider the organization's risk management framework and assess key risks to develop the plan. A maturity review (Option A) is not a prerequisite, nor is a mandated percentage of strategic coverage (Option C). Option D is incorrect because an organization does not need to follow a specific external framework to develop a risk-based plan; internal risk identification suffices.
Reference:
IIA Standards - Standard 2010: Planning; Implementation Guide 2010.