The internal audit plan must remain dynamic and responsive to changes in circumstances. If a key project is postponed, the CAE should amend the audit plan, reallocate resources appropriately, and inform the board and senior management for review and approval. This ensures transparency and continued alignment with organizational risks.
Option A improperly shifts audit resources under management's direction. Option B may be considered but requires board and management approval through an amended plan. Option D leaves resources idle, which is inefficient.
Reference:
IIA Standards - Standard 2020: Communication and Approval.

The IIA Standards emphasize that the internal audit plan must remain dynamic and responsive to changes in risks and priorities. If significant risks are identified after the plan has been approved, the CAE must revise the plan and communicate the interim changes to senior management and the board for review and approval.
Option A ignores emerging risks. Option C delays addressing significant risks. Option D bypasses governance approval and does not respect the board's oversight role.
Reference:
IIA Standards - Standard 2020: Communication and Approval.

In contract law, a witness's primary role is to confirm that the signatures on the contract were made by the actual parties (promisor and promisee) and that they signed it in the witness's presence. This helps prevent disputes regarding forgery or coercion.
(A) A witness verifies the quantities of the copies signed.
Incorrect: The witness's role is not to verify how many copies were signed but rather to confirm authenticity.
(B) A witness verifies that the contract was signed with the free consent of the promisor and promisee.
Partially correct but not the primary role: The witness's presence may discourage coercion, but their main function is not to confirm free consent (that is a legal principle covered by contract law and not necessarily the witness's duty).
(C) A witness ensures the completeness of the contract between the promisor and promisee.
Incorrect: The completeness of the contract is the responsibility of the parties involved, not the witness.
(D) A witness validates that the signatures on the contract were signed by the promisor and promisee. (Correct Answer) This aligns with the legal definition of a witness in contract law: verifying the identity of signatories and ensuring that they physically signed the contract.
The witness does not interpret the contract's terms or validate its content, only the signatures.
IIA Standard 2410 - Criteria for Communicating: Requires auditors to confirm the authenticity and validity of documents.
IIA Standard 2330 - Documenting Information: Supports the principle of ensuring reliable and complete documentation.
Contract Law Principles: A witness's role is to verify the signatories' identities and confirm they signed the document in their presence.
Analysis of Each Option:IIA References Supporting the Answer:Thus, the correct answer is (D) because a witness's main duty is to validate that the contract was signed by the identified parties, ensuring authenticity and reducing legal disputes.

The internal audit procedures manual documents policies and procedures for conducting audit engagements, including steps to follow when issues arise, such as disputes with management regarding findings. It ensures consistency and standardization of audit practice.
Option A (strategic plan) and Option C (resources) are not part of audit procedures but rather part of planning or organizational documents. Option D (authority to collect data) belongs in the internal audit charter, not in the procedures manual.
Therefore, the correct answer is appropriate response options for disputes with management (Option B).
Reference:
IIA Practice Guide - Developing the Internal Audit Manual.

Understanding Physical Access Controls:
Physical access controls protect assets by preventing unauthorized access and detecting potential security violations.
Controls can be preventive (stop incidents from occurring) or detective (identify incidents after they occur).
Why Surveillance Cameras Function as Both Preventive and Detective Controls:
Preventive: The presence of cameras discourages unauthorized access and malicious activities.
Detective: If an incident occurs, cameras provide recorded evidence for investigation and accountability.
Why Other Options Are Less Suitable:
A). Locked doors - Purely preventive, as they block unauthorized access but do not detect breaches.
B). Firewalls - Primarily an IT security measure, not a physical access control.
D). Login IDs and passwords - These are logical (IT) access controls, not physical controls.
IIA GTAG 15 - Auditing Privacy and Security Risks: Highlights the dual role of surveillance as a preventive and detective control.
IIA Standard 2120 - Risk Management: Encourages controls that both prevent and detect risks.
COSO's Internal Control Framework: Supports security measures that serve multiple control functions.
Relevant IIA References:# Final Answer: Surveillance cameras (Option C).