Certified Internal Auditor - Part 1&2

A. Definition of Internal Auditing
Define purpose, authority, and responsibility of the internal audit activity
B. Code of Ethics
Abide by and promote compliance with The IIA Code of Ethics
C. International Standards
1. Comply with The IIA’s Attribute Standards
2. Maintain independence and objectivity
Foster Independence
Foster Objectivity
3. Determine if the required knowledge, skills, and competencies are available
4. Develop and/or procure necessary knowledge, skills and competencies collectively required by the internal audit activity
5. Exercise due professional care
6. Promote continuing professional development
7. Promote quality assurance and improvement of the internal audit activity

A. Types of Controls (e.g., preventive, detective, input, output, etc.)
B. Management Control Techniques
C. Internal Control Framework Characteristics and Use (e.g., COSO, Cadbury)
Develop and implement an organization-wide risk and control framework
D. Alternative Control Frameworks
E. Risk Vocabulary and Concepts
F. Fraud Risk Awareness
1. Types of fraud
2. Fraud red flags

A. Data Gathering (Collect and analyze data on proposed engagements)
B. Data Analysis and Interpretation
C. Data Reporting
D. Documentation / Work Papers
E. Process Mapping, Including Flowcharting
F. Evaluate Relevance, Sufficiency, and Competence of Evidence

A. Strategic Role of Internal Audit
B. Operational Role of IA
C. Establish Risk-Based IA Plan

A. Plan Engagements
B. Supervise Engagement
C. Communicate Engagement Results
D. Monitor Engagement Outcomes

A. Consider the potential for fraud risks and identify common types of fraud associated with the engagement area during the engagement planning process
B. Determine if fraud risks require special consideration when conducting an engagement
C. Determine if any suspected fraud merits investigation
D. Complete a process review to improve controls to prevent fraud and recommend changes
E. Employ audit tests to detect fraud
F. Support a culture of fraud awareness, and encourage the reporting of improprieties
G. Forensic auditing – Awareness Level (A)
H. Evaluate Relevance, Sufficiency, and Competence of Evidence