Best practice and accounting standards require that receivables unlikely to be collected be written off to avoid overstating assets. Internal audit should recommend that management review the receivables and write off uncollectible debts accordingly.
Option A (escalation to the board) is premature; it should first be addressed with management. Option B (removing from cash flow statement) is not correct because write-offs affect the balance sheet and income statement, not just cash flows. Option D ignores a material risk of misstated financial statements.
Reference:
IIA Standards - Standard 2410: Criteria for Communicating; Accounting best practices for doubtful accounts.

To efficiently protect business data from corruption and errors, the best approach is proactive detection through validation controls. Batch total calculations help verify data integrity before approval, ensuring errors are caught early.
(A) Controls to ensure data is unable to be accessed without authorization.
Incorrect: Access controls prevent unauthorized access, but they do not detect or prevent data corruption
/errors.
(B) Controls to calculate batch totals to identify an error before approval. (Correct Answer) Batch control totals ensure that data entries match expected values before processing, helping detect errors before approval.
IIA GTAG 3 - Continuous Auditing recommends automated validation and reconciliation checks for data integrity.
(C) Controls to encrypt the data so that corruption is likely ineffective.
Incorrect: Encryption protects data confidentiality, but it does not prevent or detect errors or corruption.
(D) Controls to quickly identify malicious intrusion attempts.
Incorrect: Intrusion detection systems focus on cybersecurity, not data corruption or errors.
IIA Standard 2120 - Risk Management: Recommends controls for error prevention and early detection.
IIA GTAG 3 - Continuous Auditing: Suggests automated validation processes like batch totals to detect errors before approval.
Analysis of Each Option:IIA References Supporting the Answer:Thus, the correct answer is (B) because batch total calculations effectively detect errors before approval, ensuring data integrity.

When reporting internal audit findings related to Enterprise Resource Planning (ERP) systems, IT audit findings must be relevant to business objectives. Business leaders may not fully understand technical IT risks, so reports should translate IT risks into business impacts to ensure actionable decision-making.
* (A) Draft separate audit reports for business and IT management.
* Incorrect: Fragmenting reports could create misalignment, reducing the effectiveness of integrated risk management.
* (B) Connect IT audit findings to business issues. (Correct Answer)
* IT auditors should explain how IT risks impact operations, financial reporting, and strategic goals.
* IIA Standard 2410 - Criteria for Communicating requires audit findings to be clear, relevant, and actionable for all stakeholders.
* IIA GTAG 8 - Auditing Application Controls emphasizes aligning IT controls with business risks.
* (C) Include technical details to support IT issues.
* Incorrect: While technical details help IT teams, business executives need risk-based insights, not just technical specifics.
* (D) Include an opinion on financial reporting accuracy and completeness.
* Incorrect: While ERP systems impact financial data, IT auditors should focus on system risks, not directly on financial reporting opinions (which is the role of financial auditors).
* IIA Standard 2410 - Criteria for Communicating: Requires clear and business-relevant communication of audit findings.
* IIA GTAG 8 - Auditing Application Controls: Advises IT auditors to relate technical risks to business objectives.
Analysis of Each Option:IIA References Supporting the Answer:Thus, the correct answer is (B) because IT audit findings should be framed in a way that connects technical risks to business implications, making them more relevant to management.

The Just-in-Time (JIT) method is a managerial accounting and inventory management strategy that focuses on reducing or eliminating excess inventory by receiving goods only as needed.
* (A) Theory of constraints.
* Incorrect: The theory of constraints focuses on identifying and managing bottlenecks in production, not reducing inventory levels.
* (B) Just-in-time method. (Correct Answer)
* JIT aims to reduce waste, lower storage costs, and improve efficiency by ensuring that materials and products arrive only when needed.
* IIA GTAG 3 - Continuous Auditing suggests monitoring inventory controls to align with JIT principles.
* (C) Activity-based costing.
* Incorrect: Activity-based costing allocates costs to activities based on usage, not inventory reduction.
* (D) Break-even analysis.
* Incorrect: Break-even analysis calculates the level of sales needed to cover costs but does not focus on inventory management.
* IIA Standard 2120 - Risk Management: Encourages auditors to assess cost-management strategies like JIT.
* IIA GTAG 3 - Continuous Auditing: Supports real-time monitoring of inventory to minimize excess stock.
Analysis of Each Option:IIA References Supporting the Answer:Thus, the correct answer is (B) Just-in-Time (JIT) method, as it focuses on achieving low or no inventory to optimize efficiency and reduce costs.

Internal audit maintains independence by avoiding the design or implementation of management's corrective actions. However, the internal audit function has a valid role in evaluating and monitoring whether management's action plans effectively address audit observations. This ensures risks are mitigated while internal audit retains its assurance role.
Option A is too restrictive; while internal audit does not design or implement action plans, it does monitor and evaluate them. Options B and D inappropriately place responsibility for action plan design and monitoring with internal audit, which would compromise independence.
Reference:
IIA Standards - Standard 2500: Monitoring Progress.