
CIA exam practice question: daily practice for the Certified Internal Auditor (CIA) exam — domain: Part 2: Practice of Internal Auditing.
Question
An internal auditor receives a formal request from the external auditors to review and copy internal audit engagement workpapers related to year‑end financial reporting. What is the most appropriate immediate action for the internal auditor to take?
Show the answer and explanation
Correct answer: C. Inform the Chief Audit Executive, obtain authorization from appropriate oversight (for example, the audit committee or CAE), and establish terms for access including confidentiality and scope.
The best action is to inform the Chief Audit Executive and secure proper authorization and terms for access before releasing workpapers. Professional practice calls for coordination with external auditors while protecting confidentiality, documenting what will be shared, and ensuring oversight approval. Option 1 is wrong because providing copies immediately bypasses internal authorization and control of confidential workpapers. Option 2 is incorrect because an outright refusal precludes appropriate coordination and may hinder efficient external audit work; sharing can be acceptable with authorization. Option 4 is inappropriate because sending redacted excerpts without internal approval risks breaching procedures and may omit needed context or violate confidentiality controls.
Want more practice?
Prepare for the Certified Internal Auditor (CIA) exam with CIA 2026 – Certified Internal Auditor Exam Preparation (Parts 1, 2 & 3) – Training Program.
