IIA IIA-CRMA-ADV Certification in Risk Management Assurance Online Training
IIA IIA-CRMA-ADV Online Training
The questions for IIA-CRMA-ADV were last updated at May 13,2025.
- Exam Code: IIA-CRMA-ADV
- Exam Name: Certification in Risk Management Assurance
- Certification Provider: IIA
- Latest update: May 13,2025
Maintain open and effective communications with the audit committee.
- A . 1 and 2 only
- B . 3 and 4 only
- C . 1, 3, and 4 only
- D . 2, 3, and 4 only
Management has asked the chief audit executive (CAE) to provide assurance on the organization’s automated control system related to financial data. The current audit staff does not have the expertise needed to conduct this type of engagement.
Which of the following would be the best response by the CAE?
- A . Accept the assignment and use control self-assessment to complete the project.
- B . Do not accept the assignment because the internal audit activity lacks the competency to perform the engagement with due professional care.
- C . Accept the assignment and use an external provider with the necessary knowledge and skills to perform the engagement.
- D . Accept the assignment if the engagement is included in the current audit plan, but inform senior management that the current audit staff does not have the knowledge and skills required.
The chief audit executive (CAE) of a mid-sized pharmaceutical organization has operational responsibility for the regulatory compliance function. The auditcommittee requests an assessment of regulatory compliance. According to IIA guidance, which of the following is the CAE’s best course of action?
- A . Have a proficient internal audit staff member perform the assessment and disclose the impairment in the audit report and to the board.
- B . Have a regulatory compliance staff member perform a self-assessment, to be reviewed by a proficient internal auditor.
- C . Have a proficient internal audit staff member perform the audit and report the results of the assessment directly to senior management and the board.
- D . Contract with a third-party entity or external auditor to complete the assessment and report the results to senior management and the board.
Which of the following decisions made during the testing phase of a compliance audit requires the most judgment by an internal auditor?
- A . Which sampling methodology to select for testing.
- B . Which fields to examine on each invoice.
- C . Whether an individual expenditure is allowable.
- D . What level of noncompliance is acceptable.
According to the Standards, which of the following is not a consideration when exercising due professional care for an assurance engagement?
- A . The relative complexity, materiality, or significance of matters to which assurance procedures are applied.
- B . The extent of assurance services necessary to ensure that all risks are identified.
- C . The cost of providing the assurance services in relation to potential benefits.
- D . The probability of significant errors, irregularities or instances of noncompliance.
An internal audit activity (IAA) provided assurance services for an activity it was responsible for during the preceding year.
As a result, which IIA Code of Ethics principle is presumed to be impaired?
- A . Competence.
- B . Flexibility.
- C . Objectivity.
- D . Independence.
Which of the following controls is not appropriate for sales in a manufacturing organization?
- A . Customers’ orders are recorded promptly.
- B . Goods shipped are matched with valid customer orders.
- C . Goods returned are inspected for damage by the receiving department for proper disposition.
- D . Sales department approval is required for credit sales transactions.
Which of the following is a second line of defense in effective risk management and control?
- A . Purchasing department.
- B . Compliance department.
- C . Credit department.
- D . Internal audit department.