Quality Management Fundamentals and Frameworks
Quality management in an audit context is the set of structures, policies, and processes that give reasonable assurance the function consistently delivers competent, objective work. Candidates should distinguish quality control (the policies and procedures that produce quality) from quality assurance (the evaluative, evidence-based activity that confirms quality exists). The International Standards for the Professional Practice of Internal Auditing place quality requirements within their framework; the Global Internal Audit Standards issued by the IIA consolidate and reframe earlier attribute and performance standards, so questions may test either terminology - read the stem for which framework it references.
Key concepts include the quality management system, conformance, reasonable assurance, and the plan-do-check-act improvement cycle. A frequent trap is treating conformance as a guarantee of zero defects; the standard is reasonable assurance, not absolute. Another trap is confusing the audit function's quality system with an organization's enterprise quality management system (e.g., ISO 9001) - the former governs internal audit, the latter governs products and operations.
Worked rule of thumb: map every quality requirement to one of four levers - leadership and structure, competence and resourcing, work processes, and evaluation and improvement. If a question asks "where does this requirement belong?", the lever tells you the answer. For example, an annual skills inventory belongs to competence and resourcing, while an engagement-level review belongs to work processes.
Remember that quality is a management responsibility first and an evaluation activity second; the chief audit executive owns the system, and independent assessment validates it.