IIA-CHAL-QISA practice question 4 of 25
Which of the following statements is true regarding managements use of judgement to design, implement, and conduct internal control?
Choose your answer, then check it against the explanation and the full breakdown below.
Question breakdown
Key idea: Under COSO, management judgment improves decisions about internal control but cannot guarantee perfect outcomes, which is one of the framework's stated limitations.
How to reach the answer
- COSO 2013 states that management judgment is needed throughout designing, implementing, and conducting internal control.
- It explicitly lists choosing suitable accounting principles and assessing whether components are present and functioning as areas that require judgment, which rules out C and D.
- Judgment improves decision-making, which rules out B.
- Because judgment is human, it carries inherent limits, so it provides reasonable assurance only.
Each option
Common trap: Candidates may treat judgment as subjective and therefore undesirable in technical areas, which makes C or D seem plausible.
In practice: Management's assessments of control effectiveness, for example under SOX, depend on documented judgments that auditors evaluate for reasonableness.
Remember: Judgment is essential to internal control but provides reasonable, not absolute, assurance.
Drafted with AI assistance and checked against the answer key.
Keep practicing
Take the free IIA-CHAL-QISA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other IIA-CHAL-QISA practice questions
- Question 1The internal audit activity is responsible for which of the following actions related to …
- Question 2When taken by a chief audit executive, which of the following actions would be most likel…
- Question 3Which of the following actions should the internal audit activity take during an audit en…
- Question 5Which of the following statements best describes the difference between risk appetite and…
- Question 6Which of the following would be the most effective fraud prevention control?
- Question 7Which of the following could increase risks to the organization’s control environment?
