First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Environmental management systems and standards
Under ISO 14001:2015, which clause establishes the requirement to determine the context of the organization, including external and internal issues relevant to its environmental purpose?
- Clause 9.1
- Clause 4.1 Correct answer.
- Clause 7.5
- Clause 5.2
Explanation
Clause 4.1 requires the organization to determine external and internal issues relevant to its purpose and that affect its ability to achieve the intended outcomes of the environmental management system. Clauses 5.2, 7.5, and 9.1 address policy, documented information, and monitoring respectively, not context determination.
Question 2Environmental management systems and standards
In ISO 14001:2015, the concept of 'compliance obligations' replaced which term used in the earlier 2004 edition?
- Significant impacts
- Environmental aspects
- Legal and other requirements Correct answer.
- Operational controls
Explanation
The 2015 revision replaced 'legal and other requirements' with 'compliance obligations', which broadens the concept to include binding requirements the organization must comply with. Environmental aspects, significant impacts, and operational controls are separate concepts that were retained.
Question 3Environmental management systems and standards
A manufacturing site identifies a new regulatory limit on solvent emissions that applies to its coating line. Under ISO 14001:2015, where must this obligation be reflected so that it is addressed through the EMS?
- In the compliance obligations register and considered in planning actions Correct answer.
- Only in the internal audit checklist
- Only in the management review minutes
- In the marketing communications plan
Explanation
Clause 6.1.3 requires the organization to determine compliance obligations related to its environmental aspects and to plan actions to address them. Recording it only in an audit checklist, review minutes, or marketing plan does not satisfy the planning requirement.
Question 4Environmental management systems and standards
Which ISO 14001:2015 clause requires top management to ensure the environmental management system is integrated into the organization's business processes?
- Clause 8.1
- Clause 6.2
- Clause 10.2
- Clause 5.1 Correct answer.
Explanation
Clause 5.1 on leadership and commitment specifically requires top management to ensure that the EMS requirements are integrated into the organization's business processes. Clause 6.2 addresses environmental objectives, 8.1 operational planning and control, and 10.2 nonconformity and corrective action.
Question 5Environmental management systems and standards
An organization sets an environmental objective to reduce water consumption by 10 percent within two years. According to ISO 14001:2015 clause 6.2, what must the plan for achieving the objective include?
- Only the budget allocated for water-saving equipment
- Only the name of the department responsible for water management
- What will be done, what resources are required, who is responsible, when it will be completed, and how results will be evaluated Correct answer.
- Only the date on which the objective will be reviewed by top management
Explanation
Clause 6.2.2 requires planning to determine what will be done, what resources will be required, who will be responsible, when it will be completed, and how results will be evaluated. Single-element answers omit the integrated planning elements the standard requires.
Question 6Environmental management systems and standards
Under ISO 14001:2015, which of the following best describes a 'significant environmental aspect'?
- An aspect that has or can have one or more significant environmental impacts, determined using established criteria Correct answer.
- Any aspect that involves the use of electricity
- Any aspect for which the organization has received a complaint
- Any aspect that is mentioned in a regulatory permit
Explanation
Clause 3.2.2 and 6.1.2 define a significant environmental aspect as one that has or can have a significant environmental impact, identified using criteria the organization establishes. Permits, complaints, and energy use may inform criteria but do not by themselves define significance.
Question 7Environmental management systems and standards
A logistics company outsources vehicle washing to a contractor operating on its site. Under ISO 14001:2015 clause 8.1, how must the organization treat this outsourced process?
- Exclude it entirely because the contractor is a separate legal entity
- Control or influence it using criteria and ensure it is covered by the EMS to the extent the organization determines Correct answer.
- Delegate all EMS responsibility to the contractor without oversight
- Document it only in the contractor's own management system
Explanation
Clause 8.1 requires the organization to ensure that outsourced processes are controlled or influenced, consistent with a life-cycle perspective, and that the type and extent of control are defined within the EMS. Full exclusion or unverified delegation does not meet the requirement.
Question 8Environmental management systems and standards
Which standard provides guidelines for environmental labels and declarations, including Type I, Type II, and Type III labels?
- ISO 14004
- ISO 14031
- ISO 14020 Correct answer.
- ISO 14063
Explanation
ISO 14020 provides the general principles for environmental labels and declarations, with ISO 14024 covering Type I, ISO 14021 covering Type II, and ISO 14025 covering Type III. ISO 14031 addresses environmental performance evaluation, 14063 environmental communication, and 14004 general EMS guidelines.
Question 9Environmental management systems and standards
An organization wants to evaluate whether its environmental performance is meeting its objectives using indicators. Which standard is most directly applicable?
- ISO 19011
- ISO 14001
- ISO 14031 Correct answer.
- ISO 14044
Explanation
ISO 14031 provides guidance on environmental performance evaluation, including selecting and using environmental performance indicators. ISO 14001 specifies EMS requirements, ISO 14044 covers life cycle assessment, and ISO 19011 covers auditing management systems.
Question 10Environmental management systems and standards
Under ISO 14001:2015 clause 9.1.2, what must the organization do regarding its compliance status?
- Evaluate compliance with its compliance obligations and maintain knowledge and understanding of its compliance status Correct answer.
- Evaluate compliance only when a regulator requests it
- Rely on the compliance status reported by contractors
- Evaluate compliance only during certification audits
Explanation
Clause 9.1.2 requires the organization to evaluate fulfilment of its compliance obligations and to maintain knowledge and understanding of its compliance status. This is an ongoing obligation, not one triggered only by external requests or audits.
Question 11Environmental management systems and standards
In the ISO 14001:2015 framework, which clause is titled 'Performance evaluation'?
- Clause 8
- Clause 7
- Clause 9 Correct answer.
- Clause 10
Explanation
Clause 9 of ISO 14001:2015 is titled 'Performance evaluation' and covers monitoring, measurement, analysis, evaluation, internal audit, and management review. Clause 7 addresses support, clause 8 operation, and clause 10 improvement.
Question 12Environmental management systems and standards
An auditor finds that a spill response drill was conducted but no record of the drill or its evaluation exists. Which ISO 14001:2015 clause requirement is most directly affected?
- Clause 5.3, which assigns organizational roles and authorities
- Clause 6.1.1, which addresses general planning
- Clause 8.2, which requires documented information as appropriate to demonstrate emergency preparedness and response Correct answer.
- Clause 7.1, which addresses resources
Explanation
Clause 8.2 requires the organization to maintain documented information to demonstrate its emergency preparedness and response processes. Without records, the organization cannot demonstrate that the process was performed and evaluated. Roles, general planning, and resources do not specifically require this evidence.
Question 13Environmental management systems and standards
Which of the following is an example of a Type II environmental label under the ISO 14020 series?
- A label awarded by a third-party program based on life-cycle criteria
- A product declaration providing quantified life-cycle data
- A government-issued permit number
- A self-declared claim such as 'recyclable packaging' made by the manufacturer without third-party certification Correct answer.
Explanation
Type II labels are self-declared environmental claims made by manufacturers, importers, distributors, or retailers without independent third-party certification, as covered by ISO 14021. Type I involves third-party programs, Type III provides quantified life-cycle data, and permit numbers are not labels.
Question 14Environmental management systems and standards
Under ISO 14001:2015, what is the primary purpose of the management review required by clause 9.3?
- To determine the organization's product pricing strategy
- To ensure the continuing suitability, adequacy, and effectiveness of the EMS Correct answer.
- To approve the annual financial report
- To conduct internal audits of operational processes
Explanation
Clause 9.3 requires top management to review the EMS at planned intervals to ensure its continuing suitability, adequacy, and effectiveness. Financial reporting, internal auditing, and pricing are unrelated to the purpose of management review.
Question 15Environmental management systems and standards
A company's internal audit schedule shows that the waste management process was last audited three years ago, while other processes were audited annually. Under ISO 14001:2015 clause 9.2, what is the concern?
- Internal audits must cover every process every month
- Internal audits must be eliminated if no nonconformities were found previously
- The audit programme must be planned considering the environmental importance of processes and the results of previous audits Correct answer.
- Internal audits must be conducted by an external certification body
Explanation
Clause 9.2 requires the audit programme to be planned considering the environmental importance of the processes concerned and the results of previous audits. A high-importance process left unaudited for three years suggests the programme does not reflect this risk-based prioritization.
Question 16Environmental management systems and standards
Which document provides guidance on auditing management systems, including principles of auditing and managing an audit programme?
- ISO 14001
- ISO 19011 Correct answer.
- ISO 50001
- ISO 14040
Explanation
ISO 19011 provides guidelines for auditing management systems, covering audit principles, managing an audit programme, and conducting audits. ISO 14001 specifies EMS requirements, ISO 14040 covers life cycle assessment principles, and ISO 50001 addresses energy management.
Question 17Environmental management systems and standards
In life cycle assessment methodology under ISO 14040, which phase follows goal and scope definition?
- Inventory analysis Correct answer.
- Interpretation
- Impact assessment
- Reporting
Explanation
The ISO 14040 framework consists of goal and scope definition, inventory analysis, impact assessment, and interpretation, in that sequence. Inventory analysis follows goal and scope definition, and interpretation is the final phase that draws conclusions across the other phases.
Question 18Environmental management systems and standards
An organization is deciding the scope of its ISO 14001 EMS. Which statement best reflects the requirement in clause 4.3?
- The scope must be documented and available, and must state the activities, products, and services covered Correct answer.
- The scope must be approved by the certification body before implementation
- The scope may exclude all activities with significant environmental aspects
- The scope must cover every facility worldwide regardless of control
Explanation
Clause 4.3 requires the organization to determine and document the boundaries and applicability of the EMS, and the scope must be maintained as documented information and available to interested parties. It must be credible and appropriate, and cannot exclude activities with significant aspects that the organization controls.
Question 19Environmental management systems and standards
Under ISO 14001:2015, what is the relationship between 'risks and opportunities' and environmental aspects in clause 6.1?
- The organization must determine risks and opportunities related to environmental aspects, compliance obligations, and other issues Correct answer.
- Risks and opportunities apply only to financial planning
- Risks and opportunities replace the need to identify environmental aspects
- Risks and opportunities are determined solely by the certification body
Explanation
Clause 6.1 requires the organization to determine risks and opportunities related to environmental aspects, compliance obligations, and other issues identified in clause 4.1. Aspects remain a distinct requirement and are not replaced by risk and opportunity determination.
Question 20Environmental management systems and standards
Which ISO standard specifies requirements for environmental management systems and is certifiable by third parties?
- ISO 14005
- ISO 14001 Correct answer.
- ISO 14004
- ISO 14006
Explanation
ISO 14001 contains the certifiable requirements for an EMS against which organizations can be audited and certified. ISO 14004 provides general guidelines, ISO 14005 guidance on phased implementation, and ISO 14006 guidance on eco-design.
Question 21Environmental management systems and standards
A chemical plant identifies that a change in raw material supplier could alter its wastewater characteristics. Under ISO 14001:2015 clause 8.1, how should this be managed?
- Delegate the review entirely to the supplier
- Wait until the next certification audit to assess the change
- Control planned changes and review the consequences of unintended changes, taking action to mitigate adverse effects Correct answer.
- Apply the change without review because supplier changes are commercial decisions
Explanation
Clause 8.1 requires the organization to control planned changes and review the consequences of unintended changes, taking action to mitigate any adverse effects. Changes with environmental implications must be assessed before implementation, not deferred to audits or delegated without oversight.
Question 22Environmental management systems and standards
An organization claims its product is 'environmentally friendly' without defining the basis for the claim. Which ISO principle for environmental labels and declarations is most directly breached?
- Claims should be updated only when the product is redesigned
- Claims should be accurate, verifiable, relevant, and not misleading Correct answer.
- Claims should be reviewed only by the marketing department
- Claims should be written in the organization's preferred language only
Explanation
ISO 14020 establishes that environmental claims should be accurate, verifiable, relevant, and not misleading, and should be based on recognized scientific methods where appropriate. Vague claims such as 'environmentally friendly' without a defined basis conflict with this principle.
Question 23Environmental management systems and standards
Which of the following best describes the 'life cycle perspective' required by ISO 14001:2015 clause 6.1.2?
- Considering only the manufacturing stage of a product
- Considering stages from raw material acquisition through end-of-life treatment and disposal when determining environmental aspects Correct answer.
- Considering only the stages controlled by suppliers
- Considering only the disposal stage of a product
Explanation
Clause 6.1.2 requires organizations to consider a life cycle perspective when determining environmental aspects, covering stages from raw material acquisition or generation from natural resources through end-of-life treatment and disposal. Focusing on a single stage does not satisfy this requirement.
Question 24Environmental management systems and standards
An organization's EMS has a nonconformity where corrective action was taken but the root cause was not addressed, and the same issue recurred. Which clause of ISO 14001:2015 most directly addresses this failure?
- Clause 5.2, which covers the environmental policy
- Clause 7.2, which covers competence
- Clause 10.2, which requires evaluating the need for action to eliminate the cause of a nonconformity Correct answer.
- Clause 9.1, which covers monitoring and measurement
Explanation
Clause 10.2 requires the organization to react to nonconformity, evaluate the need for action to eliminate the cause, implement action, review effectiveness, and update risks and opportunities. Addressing symptoms without eliminating the cause fails this requirement.
Question 25Environmental management systems and standards
Which statement correctly distinguishes ISO 14001 from ISO 14004?
- ISO 14004 contains certifiable requirements, while ISO 14001 provides guidance only
- Both are certifiable requirement standards
- Neither standard addresses environmental management systems
- ISO 14001 contains certifiable requirements, while ISO 14004 provides non-certifiable guidance for implementation Correct answer.
Explanation
ISO 14001 is the requirements standard against which EMS certification is performed, while ISO 14004 offers general guidelines and support for implementation without being certifiable. The two standards are complementary, not interchangeable.
Question 26Environmental management systems and standards
Which ISO 14000-series standard gives general guidelines on the principles, systems and supporting techniques for environmental management, and is explicitly not intended for certification?
- ISO 14004 Correct answer.
- ISO 14001
- ISO 19011
- ISO 14031
Explanation
ISO 14004 provides guidance on establishing, implementing, maintaining and improving an EMS and is explicitly non-certifiable; ISO 14001 holds the auditable requirements. This distinction matters because only ISO 14001 requirements can form the basis of third-party certification.
Question 27Environmental management systems and standards
Under ISO 14001:2015, which clause requires the organization to determine the boundaries and applicability of the environmental management system?
- Clause 6.2
- Clause 5.2
- Clause 4.3 Correct answer.
- Clause 7.5
Explanation
Clause 4.3 'Determining the scope of the environmental management system' requires the organization to define boundaries and applicability, taking into account external and internal issues, compliance obligations, and its activities, products and services. The scope must be documented and available to interested parties.
Question 28Environmental management systems and standards
Which ISO 14000-series standard provides a framework of process-based guidelines specifically for evaluating environmental performance using indicators such as operational performance indicators and management performance indicators?
- ISO 14063
- ISO 14005
- ISO 14031 Correct answer.
- ISO 14040
Explanation
ISO 14031 gives guidance on environmental performance evaluation (EPE), including how to select environmental condition indicators, operational performance indicators and management performance indicators. It supports an EMS but does not itself set performance levels.
Question 29Environmental management systems and standards
An organization wants to demonstrate that its environmental management system conforms to a recognized international standard and obtain independent verification. Which ISO standard should it be audited against?
- ISO 14004
- ISO 14020
- ISO 14001 Correct answer.
- ISO 14064
Explanation
ISO 14001:2015 specifies the requirements for an environmental management system and is the standard against which certification bodies conduct third-party audits. The other standards provide guidance or address specific tools rather than certifiable EMS requirements.
Question 30Environmental management systems and standards
Under ISO 14001:2015 clause 6.1.1, when planning the EMS the organization must consider the issues from clause 4.1 and the requirements from clause 4.2, then determine what else?
- The number of internal auditors required
- The financial cost of each environmental objective
- The marketing benefits of an environmental label
- Risks and opportunities related to environmental aspects, compliance obligations and other issues Correct answer.
Explanation
Clause 6.1.1 requires the organization to determine risks and opportunities related to its environmental aspects, compliance obligations and other issues and requirements identified in clauses 4.1 and 4.2. The purpose is to give assurance the EMS can achieve its intended outcomes, prevent or reduce undesired effects, and achieve continual improvement.
Question 31Environmental management systems and standards
An organization's environmental policy commits it to 'meeting all applicable compliance obligations'. Under ISO 14001:2015 clause 5.2, which additional commitment must the environmental policy include?
- Publication of all emission data on a public website
- Protection of the environment, including prevention of pollution and other specific commitments relevant to context Correct answer.
- Annual third-party certification of every supplier
- A guarantee of zero environmental incidents
Explanation
Clause 5.2 requires the policy to include a commitment to protection of the environment, including prevention of pollution and other specific commitments relevant to the context of the organization, alongside fulfilling compliance obligations. Protection of the environment is broader than pollution prevention alone and should reflect the organization's context.
Question 32Environmental management systems and standards
A manufacturing site sets an environmental objective to reduce water consumption by 15% within two years. Under ISO 14001:2015 clause 6.2, what must accompany this objective?
- A life cycle assessment covering every product line
- A plan of what will be done, resources required, responsible person, timeframe and how results will be evaluated Correct answer.
- A financial audit of the water utility contract
- A signed statement from the local regulator approving the target
Explanation
Clause 6.2 requires objectives to be measurable where practicable, monitored, communicated and updated, and requires planning that specifies what will be done, what resources are needed, who is responsible, when it will be completed, and how results will be evaluated. This planning element is what makes the objective actionable and auditable.
Question 33Environmental management systems and standards
Under ISO 14001:2015 clause 7.2, what must the organization determine regarding persons doing work under its control that affects environmental performance?
- The nationality of each employee
- The employee's membership of a trade union
- The necessary competence of persons doing work, based on appropriate education, training or experience Correct answer.
- The number of years each employee has held a driving licence
Explanation
Clause 7.2 requires the organization to determine the necessary competence of persons doing work under its control that affects environmental performance or its ability to fulfil compliance obligations. It must ensure these persons are competent on the basis of education, training or experience, and retain documented information as evidence.
Question 34Environmental management systems and standards
An organization maintains an EMS but has not established a process for preparing for and responding to potential emergency situations such as chemical spills. Which ISO 14001:2015 clause requirement has it failed to address?
- Clause 8.2, emergency preparedness and response Correct answer.
- Clause 8.1, operational planning and control
- Clause 9.3, management review
- Clause 10.2, nonconformity and corrective action
Explanation
Clause 8.2 requires the organization to establish, implement and maintain the processes needed to prepare for and respond to potential emergency situations, including planned responses, training, periodic testing and review after tests or actual incidents. A missing spill response process is a direct gap against this clause.
Question 35Environmental management systems and standards
Which ISO 14001:2015 clause requires the organization to establish, implement and maintain a process for monitoring, measurement, analysis and evaluation, including determining what needs to be monitored and the methods for valid results?
- Clause 10.1
- Clause 9.3
- Clause 9.2
- Clause 9.1.1 Correct answer.
Explanation
Clause 9.1.1 'General' requires the organization to monitor, measure, analyse and evaluate its environmental performance, determining what needs monitoring, the methods for valid results, the criteria against which performance is evaluated, and when results are analysed. This provides the factual basis for performance evaluation.
Question 36Environmental management systems and standards
An auditor notes that an organization's internal audit programme covers all EMS processes but always uses the same auditor for the area in which that auditor works. Which ISO 14001:2015 clause 9.2 requirement is at risk?
- Requiring external certification bodies to perform internal audits
- Publishing audit results to all interested parties
- Ensuring audits are conducted at least once every five years
- Selecting auditors who ensure objectivity and impartiality of the audit process Correct answer.
Explanation
Clause 9.2 requires the organization to select auditors and conduct audits that ensure objectivity and impartiality of the audit process. Auditors should not audit their own work, so using an auditor for their own area undermines the impartiality requirement even if the schedule looks complete.
Question 37Environmental management systems and standards
A company's management review minutes record only financial results and customer satisfaction. Which ISO 14001:2015 clause 9.3 input has been omitted that concerns the extent to which environmental objectives have been achieved?
- The organization's marketing strategy
- The extent to which environmental objectives have been achieved Correct answer.
- The share price of the parent company
- The competitor's environmental report
Explanation
Clause 9.3 lists required management review inputs, including the status of actions from previous reviews, changes in external and internal issues, the extent to which environmental objectives have been achieved, and information on environmental performance and compliance obligations. Omitting objective achievement leaves the review unable to assess EMS effectiveness.
Question 38Environmental management systems and standards
Under ISO 14001:2015 clause 10.2, when a nonconformity occurs the organization must react to it, evaluate the need for action to eliminate the cause, implement action, review effectiveness, and then what?
- Notify all interested parties within 24 hours
- Recalculate the scope of the EMS
- Update risks and opportunities determined during planning, if necessary Correct answer.
- Immediately suspend the EMS certification
Explanation
Clause 10.2 requires the organization to review and, if necessary, update the risks and opportunities determined during planning after correcting a nonconformity. This links corrective action back to clause 6.1 so that the risk picture stays current and the same failure is less likely to recur.
Question 39Environmental management systems and standards
An organization outsources its effluent treatment to a contractor but retains operational control over the discharge point. Under ISO 14001:2015 clause 8.1, how should the outsourced process be treated?
- It must be certified to ISO 14001 by the contractor
- It is addressed only under clause 7.4 communication
- It can be excluded from the EMS because a contractor performs the work
- It must be controlled or influenced, with the type and degree of control defined within the EMS Correct answer.
Explanation
Clause 8.1 requires the organization to ensure that outsourced processes are controlled or influenced, and to determine the type and degree of control or influence to apply. The organization remains accountable for environmental performance at its discharge point even when a contractor operates the treatment plant.
Question 40Environmental management systems and standards
An organization wants to use the phased implementation approach described in ISO 14005. Which statement best describes how that standard relates to ISO 14001?
- It sets emission limits that supersede national regulations
- It provides certification criteria for environmental labels
- It replaces ISO 14001 with a lighter set of mandatory requirements
- It guides incremental development of an EMS toward the requirements of ISO 14001, including use of performance indicators at each phase Correct answer.
Explanation
ISO 14005 gives guidance for a phased approach to establishing an EMS, allowing organizations, especially smaller ones, to build toward full ISO 14001 conformity while using environmental performance indicators to track progress. It is guidance and does not replace the requirements of ISO 14001.
Question 41Audit principles, ethics, and professional conduct
Under the IPPF, which fundamental principle requires a public sector internal auditor to avoid conduct that could discredit the profession or the audit organization?
- Confidentiality
- Competency
- Integrity Correct answer.
- Objectivity
Explanation
Integrity obliges internal auditors to perform work honestly and to avoid conduct that damages the profession's or organization's reputation. Objectivity concerns impartiality of judgment, confidentiality concerns information handling, and competency concerns knowledge and skills, so none of the others captures reputational conduct.
Question 42Audit principles, ethics, and professional conduct
A public sector auditor is offered a paid weekend consultancy by an entity she audited last year. Which concept is most directly threatened if she accepts?
- Organizational independence
- Due professional care
- Continuing professional development
- Individual objectivity Correct answer.
Explanation
Individual objectivity is impaired when an auditor takes on work that creates a self-interest or familiarity threat with a former auditee. Organizational independence concerns the audit function's reporting lines and status, while due care and development relate to how work is performed and maintained.
Question 43Audit principles, ethics, and professional conduct
Which statement best describes the purpose of the internal audit charter in a public sector organization?
- It records the qualifications and certifications held by each auditor.
- It documents the audit plan approved by management for the coming year.
- It formally defines internal audit's purpose, authority, and responsibility. Correct answer.
- It lists the audit findings and management responses from prior engagements.
Explanation
The internal audit charter is the formal document that establishes internal audit's purpose, authority, and responsibility, and it must be approved by the governing body. The annual plan, staff credentials, and prior findings are separate records that do not define the function's mandate.
Question 44Audit principles, ethics, and professional conduct
An auditor discovers that a colleague accepted gifts from a vendor during an ongoing procurement audit. According to the Code of Ethics, what is the auditor's primary obligation?
- Report the matter through established channels in accordance with the organization's ethics policies. Correct answer.
- Wait until the engagement concludes to avoid disrupting the audit.
- Document the issue in the working papers and take no further action.
- Confront the vendor directly and demand the gifts be returned.
Explanation
The Code of Ethics requires internal auditors to report observed unethical or illegal behavior through the channels defined by the organization, consistent with its policies. Direct confrontation, silent documentation, or delay does not satisfy the duty to escalate suspected impropriety.
Question 45Audit principles, ethics, and professional conduct
Which of the following is the most appropriate description of 'due professional care' for a public sector internal auditor?
- Guaranteeing that no material errors remain undetected after an engagement.
- Completing each engagement within the budgeted number of hours.
- Applying the level of care and skill expected of a reasonably prudent auditor in similar circumstances. Correct answer.
- Performing every engagement personally rather than delegating any work.
Explanation
Due professional care means applying the diligence and skill a reasonably prudent and competent auditor would exercise in comparable circumstances. It does not guarantee that all errors are found, require personal performance of all work, or reduce to meeting a time budget.
Question 46Audit principles, ethics, and professional conduct
A public sector audit organization is functionally independent when it reports results to which body?
- The chief financial officer of the audited entity
- The operational manager responsible for the audited program
- The external audit firm engaged by the entity
- The governing body or audit committee with oversight of the entity Correct answer.
Explanation
Functional independence is supported when the chief audit executive reports to and has direct access to the governing body or audit committee. Reporting to the CFO, an external firm, or the operational manager places the audit function under the influence of the areas it reviews.
Question 47Audit principles, ethics, and professional conduct
During an audit of a grant program, an auditor is asked by the program director to remove a finding about undocumented expenditures. The auditor should:
- Modify the finding to describe it as a minor administrative issue.
- Delay issuing the report indefinitely to avoid conflict.
- Remove the finding because the director is responsible for the program.
- Retain the finding and communicate the request to the chief audit executive and, if necessary, the governing body. Correct answer.
Explanation
Objectivity requires the auditor to resist pressure to suppress or alter findings and to escalate interference to senior audit leadership and the governing body. Removing or softening the finding compromises the integrity of the report, and indefinite delay fails the reporting obligation.
Question 48Audit principles, ethics, and professional conduct
An auditor previously served as the manager responsible for the payroll system now being audited. According to the IIA standards, what is the most appropriate action?
- Proceed with the engagement because the auditor knows the system well.
- Perform the audit only if the payroll manager approves.
- Disclose the prior role and recuse from the engagement, or ensure it is reviewed by someone independent. Correct answer.
- Decline to audit the area permanently.
Explanation
A self-review threat arises when an auditor assesses work for which they were recently responsible, so the auditor should disclose the conflict and recuse, or have the work independently reviewed. Relying on familiarity or seeking the auditee's approval does not resolve the impairment.
Question 49Audit principles, ethics, and professional conduct
Which of the following best illustrates a breach of confidentiality by a public sector internal auditor?
- Discussing identifiable audit findings with a journalist before the report is released. Correct answer.
- Retaining audit records in accordance with the organization's retention schedule.
- Sharing engagement workpapers with the external auditor as authorized by policy.
- Providing information to a regulator as required by law.
Explanation
Confidentiality prohibits disclosing information acquired in the course of duty without proper authority, and leaking findings to a journalist is a clear breach. Sharing with authorized external auditors, lawful retention, and legally required disclosures are permitted uses.
Question 50Audit principles, ethics, and professional conduct
A chief audit executive is asked to assume temporary responsibility for the accounts payable function during a staff shortage. What is the most appropriate response consistent with the standards?
- Accept and delegate the audit of accounts payable to a junior auditor.
- Decline, or accept only with safeguards such as independent oversight and disclosure to the governing body, because assuming management responsibility impairs independence. Correct answer.
- Accept, because the role is temporary and operational needs are pressing.
- Accept only if the CAE also audits accounts payable to demonstrate oversight.
Explanation
Taking on management responsibilities creates a significant independence impairment, so the CAE should decline or accept only with disclosure and safeguards ensuring the area is audited independently. Auditing one's own operational work is a self-review threat regardless of duration or delegation.