IIA-CIA-PART1 practice question 2 of 35

Which of the following best demonstrates the board of directors' governance over internal control?

Full set: 735 questions
Answer options
A: The board bears direct responsibility for developing and implementing the internal control system.
B: The majority of board members are experienced and qualified members of the organization's executive management team.
C: The board may be assisted by an audit committee, chaired by the chief audit executive.
D: The board is responsible for succession planning for the CEO and other key members of the executive management team. Correct answer
Correct Answer:
D. The board is responsible for succession planning for the CEO and other key members of the executive management team.
Explanation

The board of directors' primary governance role is oversight, not direct management. Succession planning for the CEO and key executives is a critical oversight function that directly establishes the "tone at the top." By selecting, evaluating, and planning for the replacement of senior leadership, the board ensures that competent and ethical individuals are in place to design, implement, and maintain the organization's system of internal control. This action is a fundamental component of the control environment, which is the foundation for all other components of internal control, making it the best demonstration of governance.

Why Incorrect

A. This is incorrect because senior management, not the board, is directly responsible for developing and implementing the internal control system. The board's role is to oversee this process.
B. This describes a poor governance structure. Best practices require a majority of independent, non-executive directors to ensure objective oversight and mitigate conflicts of interest.
C. The audit committee chair must be an independent, non-executive board member. The chief audit executive (CAE) reports functionally to the audit committee but cannot chair it, as this would impair independence.

References

1. The Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2013). Internal Control – Integrated Framework: Executive Summary.

Principle 2, Page 6: "The board of directors demonstrates independence from management and exercises oversight of the development and performance of internal control." The supporting text clarifies that the board's oversight responsibilities include selecting and overseeing key members of senior management, including the CEO.

2. The Institute of Internal Auditors (IIA). (2017). International Standards for the Professional Practice of Internal Auditing.

Standard 2110: Governance, Page 13: "The internal audit activity must assess and make appropriate recommendations to improve the organization’s governance processes for... Ensuring effective organizational performance management and accountability." This standard encompasses the board's oversight of senior management's performance and accountability, which includes their selection and succession.

3. Larcker, D. F., & Tayan, B. (2015). Corporate Governance Matters: A Closer Look at Organizational Choices and Their Consequences. Stanford Graduate School of Business.

Chapter 4: The Board of Directors, Section on "CEO Succession Planning," Pages 101-104: This academic text explicitly identifies CEO succession planning as one of the most important responsibilities of the board of directors, highlighting it as a cornerstone of effective governance and long-term organizational stability.

Question breakdown

Tests
Distinguish board governance oversight from management's control responsibilities
Difficulty
Medium

Key idea: The board exercises governance over internal control through oversight activities such as setting tone at the top and planning executive succession, not by designing or running controls.

How to reach the answer

  1. The question asks what shows the board's governance role, meaning oversight rather than execution.
  2. Designing and implementing internal control belongs to management, which rules out A.
  3. Effective boards have independent, non-executive majorities, which rules out B.
  4. Audit committees are chaired by independent directors, never by the CAE, which rules out C.
  5. CEO and executive succession planning is a core board oversight duty that shapes the control environment, so D fits.

Each option

  • AIncorrect. Developing and implementing the internal control system is management's job; the board oversees it.
  • BIncorrect. A board dominated by executive management undermines its independence and its ability to provide objective oversight.
  • CIncorrect. The CAE reports to the audit committee and does not chair it, because doing so would impair independence.
  • DCorrect. Succession planning for the CEO and key executives is a board oversight responsibility that influences the control environment and tone at the top.

Common trap: Option A sounds like strong board involvement, but direct responsibility for building controls is management's role, not the board's governance role.

In practice: Board and nominating committee charters typically assign CEO selection, evaluation, and succession to the board. Management owns the design and operation of controls under frameworks like COSO.

Remember: The board oversees and sets direction, while management designs and operates internal controls.

Reviewed by Alexandra Stone.

Keep practicing

Take the free IIA-CIA-PART1 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other IIA-CIA-PART1 practice questions

Scroll to Top