Explore the drawbacks of using Internal Control Questionnaires (ICQs) in auditing. Learn why ICQs may not always provide effective assurance on organizational processes and their practical limitations.
Table of Contents
Question
Which of the following statements is true regarding a drawback of using internal control questionnaires (ICQs)?
A. When internal auditors need to cover many control procedures, using ICQs is generally less than conducting observations and inspections.
B. It is generally difficult for internal auditors to compile appropriate ICQs for business activities that are governed by standardized operating procedures.
C. ICQs are inadequate to provide effective assurance on how organizational processes are executed in practice.
D. It is generally difficult for internal auditors to process completed questionnaires, because ICQs frequently elicit detailed comments and long answers from management.
Answer
C. ICQs are inadequate to provide effective assurance on how organizational processes are executed in practice.
Explanation
Internal Control Questionnaires (ICQs) are widely used tools in auditing to assess an organization’s internal control environment. However, they do have limitations, and the primary drawback is captured in option C.
1. Inadequate assurance on practical execution:
ICQs typically provide a yes/no or multiple-choice format for responses, which can oversimplify complex control processes. They may not capture the nuances of how controls are actually implemented and executed in day-to-day operations. This limitation means that ICQs alone cannot provide effective assurance on how organizational processes are carried out in practice.
2. Potential for misrepresentation:
Respondents may provide answers that reflect how processes should work rather than how they actually work. This can lead to a gap between documented controls and actual practices.
3. Lack of depth:
ICQs often fail to probe deeply into control activities, focusing instead on the existence of controls rather than their effectiveness or consistency of application.
4. Limited context:
ICQs may not account for the specific context or environment in which controls operate, potentially missing important factors that influence control effectiveness.
Regarding the other options:
A is incorrect because ICQs are generally considered more time-efficient than observations and inspections when covering many control procedures, not less efficient.
B is inaccurate because standardized operating procedures actually make it easier, not more difficult, to compile appropriate ICQs.
D is not correct because ICQs typically use closed-ended questions that do not elicit detailed comments or long answers, making them relatively easy to process.
In conclusion, while ICQs are valuable tools in the internal audit process, they have limitations in providing a complete picture of how controls are executed in practice. Auditors should use ICQs in conjunction with other methods, such as observations, interviews, and testing, to gain a comprehensive understanding of an organization’s internal control environment.
IIA-CIA-Part2 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the IIA-CIA-Part2 exam and earn IIA-CIA-Part2 certification.