CISA Domain 1B-6 Practice Test 001

This practice test covers Domain 1 (Information Systems Auditing Process) Subdomain B-6 (Quality Assurance and Improvement of Audit Process) from the CISA exam content outline.

These questions are inspired by the ISACA CISA exam and are designed to help you test your knowledge of information systems auditing, governance, risk management, IT operations, business resilience, and information asset protection.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the audit judgment, control evaluation, and risk-based decision-making skills tested in the CISA exam.

Note: CISA and Certified Information Systems Auditor are registered trademarks of ISACA. This content is not affiliated with or endorsed by ISACA.

To choose CISA practice tests based on specific domains and subdomains, click that link.

CISA 1B-6 Quality Assurance and Improvement of Audit Process Practice Test 001

10 questions • Single best answer

Question 1

A financial institution's chief audit executive is establishing a quality assurance and improvement program for the IS audit function. The audit committee has requested ongoing assurance that audit work conforms to professional IS audit standards. Which of the following should the program include to provide the BEST continuous assurance of conformance?

A. Internal ongoing monitoring, periodic self-assessments, and an external assessment. B. An annual external quality assessment conducted independently by the institution's primary banking regulator each year. C. Supervisory review of every auditor's workpapers performed only by the engagement lead. D. A yearly satisfaction survey distributed to the audited business units.

Question 2

During an external quality assessment of a hospital's internal audit activity, the assessor notes that no external review has been performed in the past six years, although internal self-assessments are documented annually. Which conclusion is MOST appropriate regarding the audit function's conformance with professional quality standards?

A. The function is fully conformant because its documented annual self-assessments already satisfy the external requirement. B. The gap is immaterial because ongoing internal monitoring is documented and performed. C. The function is nonconformant because external assessments should occur at least every five years. D. Conformance cannot be assessed without first reviewing individual engagement workpapers.

Question 3

An audit manager at a manufacturing company reviews the quality assurance program and finds that several recent engagements repeatedly missed reporting deadlines and required reissued reports because of factual errors. To improve the audit process on a sustainable basis, what should the audit manager do FIRST?

A. Reassign the affected engagements to more experienced audit staff. B. Increase mandatory supervisory review time on all future engagements. C. Add additional quality control checkpoints to the standardized reporting template before the next audit cycle. D. Perform a root cause analysis of the recurring deficiencies.

Question 4

A government agency's internal audit function assigns its periodic quality self-assessment to the same senior auditors who led the engagements being reviewed. An IS auditor evaluating the quality assurance program is concerned about the credibility and objectivity of the reported results. Which finding is MOST significant?

A. The self-assessment results were not formally reported to the audit committee. B. Reviewers assessing their own engagements compromise the objectivity of the assessment results. C. The self-assessment did not include stakeholder satisfaction metrics. D. The self-assessment was performed annually rather than each quarter.

Question 5

An insurance company's audit director wants to measure the effectiveness of the IS audit function as part of a continuous improvement program. Several performance indicators are proposed by the team for the audit committee. Which metric provides the BEST insight into audit quality rather than simply audit output?

A. The percentage of audit findings accepted and remediated by management. B. The total number of audit reports issued during the year. C. The average number of hours charged per completed engagement. D. The number of engagements completed on schedule against the approved annual audit plan.

Question 6

During an IS audit at an energy company, a scope limitation prevented the team from performing a required testing procedure, yet the draft report states the work was 'conducted in accordance with IS audit standards.' A quality reviewer identifies this before issuance. What is the reviewer's BEST course of action?

A. Remove the reference to standards and issue the report without any further explanation. B. Allow the statement to remain because the limitation was outside the audit team's control. C. Require disclosure of the nonconformance and its effect in the report. D. Delay issuing the report until the scope limitation can be fully resolved through additional testing.

Question 7

A retail company's audit team has just completed a complex, first-time audit of a newly deployed ERP environment that presented several unexpected challenges. As part of the quality improvement process, the audit manager wants future engagements to benefit from this experience. Which action is MOST appropriate?

A. Archive the workpapers and close the engagement without additional follow-up steps. B. Conduct a post-engagement lessons-learned review and update the audit methodology accordingly. C. Report the unexpected challenges to the audit committee as a significant control deficiency in operations. D. Recommend that the ERP environment be re-audited within the next six months.

Question 8

A telecommunications company's quality reviewer examines a completed engagement file and finds thorough and well-organized workpapers but no documented evidence that a supervisor reviewed the work and conclusions before the final report was issued to management. Which of the following represents the MOST significant quality concern?

A. The workpapers were retained in electronic rather than in paper form. B. The engagement exceeded its originally budgeted number of hours. C. The workpapers did not cross-reference each applicable IS audit standard and guideline. D. There is no assurance that the conclusions were adequately supervised and reviewed.

Question 9

A bank is arranging the five-year external quality assessment of its internal audit function. Management proposes that a partner from the firm currently providing the bank's outsourced internal audit co-sourcing services perform the review. An IS auditor is asked to evaluate this proposal. What is the auditor's BEST response?

A. The arrangement is acceptable because the partner already understands the function well. B. The arrangement is acceptable provided the audit committee approves it in writing. C. The assessor lacks independence, so a qualified party with no conflict should be engaged. D. The external assessment is unnecessary if internal self-assessments are performed regularly.

Question 10

Following an external quality assessment, a logistics company's audit function received several recommendations to improve its methodology and documentation practices. The chief audit executive presents the assessment results to the audit committee. To demonstrate genuine and lasting process improvement, what should the audit function do NEXT?

A. File the assessment report and schedule the next external review in five years. B. Develop a corrective action plan with assigned owners and timelines, and monitor implementation. C. Communicate the recommendations to the audited business units to obtain their input. D. Limit future engagements to areas where prior audit quality was already strong.

Related Posts

Leave a Comment Cancel Reply