IIA-CIA-PART1 practice question 2 of 35
Which of the following best demonstrates the board of directors' governance over internal control?
Full set: 735 questionsThe board of directors' primary governance role is oversight, not direct management. Succession planning for the CEO and key executives is a critical oversight function that directly establishes the "tone at the top." By selecting, evaluating, and planning for the replacement of senior leadership, the board ensures that competent and ethical individuals are in place to design, implement, and maintain the organization's system of internal control. This action is a fundamental component of the control environment, which is the foundation for all other components of internal control, making it the best demonstration of governance.
A. This is incorrect because senior management, not the board, is directly responsible for developing and implementing the internal control system. The board's role is to oversee this process.
B. This describes a poor governance structure. Best practices require a majority of independent, non-executive directors to ensure objective oversight and mitigate conflicts of interest.
C. The audit committee chair must be an independent, non-executive board member. The chief audit executive (CAE) reports functionally to the audit committee but cannot chair it, as this would impair independence.
1. The Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2013). Internal Control – Integrated Framework: Executive Summary.
Principle 2, Page 6: "The board of directors demonstrates independence from management and exercises oversight of the development and performance of internal control." The supporting text clarifies that the board's oversight responsibilities include selecting and overseeing key members of senior management, including the CEO.
2. The Institute of Internal Auditors (IIA). (2017). International Standards for the Professional Practice of Internal Auditing.
Standard 2110: Governance, Page 13: "The internal audit activity must assess and make appropriate recommendations to improve the organization’s governance processes for... Ensuring effective organizational performance management and accountability." This standard encompasses the board's oversight of senior management's performance and accountability, which includes their selection and succession.
3. Larcker, D. F., & Tayan, B. (2015). Corporate Governance Matters: A Closer Look at Organizational Choices and Their Consequences. Stanford Graduate School of Business.
Chapter 4: The Board of Directors, Section on "CEO Succession Planning," Pages 101-104: This academic text explicitly identifies CEO succession planning as one of the most important responsibilities of the board of directors, highlighting it as a cornerstone of effective governance and long-term organizational stability.
Question breakdown
Key idea: The board exercises governance over internal control through oversight activities such as setting tone at the top and planning executive succession, not by designing or running controls.
How to reach the answer
- The question asks what shows the board's governance role, meaning oversight rather than execution.
- Designing and implementing internal control belongs to management, which rules out A.
- Effective boards have independent, non-executive majorities, which rules out B.
- Audit committees are chaired by independent directors, never by the CAE, which rules out C.
- CEO and executive succession planning is a core board oversight duty that shapes the control environment, so D fits.
Each option
Common trap: Option A sounds like strong board involvement, but direct responsibility for building controls is management's role, not the board's governance role.
In practice: Board and nominating committee charters typically assign CEO selection, evaluation, and succession to the board. Management owns the design and operation of controls under frameworks like COSO.
Remember: The board oversees and sets direction, while management designs and operates internal controls.
Reviewed by Alexandra Stone.
Keep practicing
Take the free IIA-CIA-PART1 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other IIA-CIA-PART1 practice questions
- Question 1To comply with the proficiency standard which of the following would the chief audit exec…
- Question 3Which of the following written documents typically offers the best evidence that internal…
- Question 4Which of the following is an appropriate role for the internal audit activity?
- Question 5It is important for the chief audit executive to consider the level of competence of the …
- Question 6An internal auditor is performing testing to gather evidence regarding an organization’s …
- Question 7According to IIA guidance, which of the following actions by the chief audit executive (C…
