An auditor's communication of internal control related matters noted in an audit usually should be addressed to:
Suggested Answer: A
Get Premium CPA-Auditing Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Choice 'a' is correct. An auditor's communication of internal control related matters noted in an audit usually should be addressed to management and those charged with governance.
Choices 'b', 'c', and 'd' are incorrect. The director of internal auditing, the chief financial officer, and the chief accounting officer all would have access to the letter; however, it would not be addressed to them since they do not have the same level of authority and responsibility to the shareholders as management and those charged with governance.
11 comments · newest first
DA
Darell
11 months ago
I thought it would be the CFO, but A sounds right!
CH
Christiane
11 months ago
A makes the most sense, but I wonder if it varies by company.
GL
Glenn
12 months ago
Wait, are we sure it’s not B? Seems like a good option too.
ME
Melita
12 months ago
I agree, A is the right choice!
TU
Tuyet
12 months ago
Definitely A, that's standard practice.
TA
Tawanna
1 year ago
I'm leaning towards option A, but I wonder if there are exceptions where it might be different, like in smaller organizations.
EM
Emile
1 year ago
I feel like the director of internal auditing might be involved, but I don't recall if they are the primary audience for these communications.
CE
Ceola
1 year ago
I remember a practice question where we discussed the importance of addressing internal control issues to the right parties. I think it was similar to this one.
CR
Cruz
1 year ago
I think the communication should go to management and those charged with governance, but I'm not entirely sure if that's always the case.
DO
Dorthy
1 year ago
I'm pretty sure the answer is Atbash, since that's a well-known substitution cipher used in ancient Hebrew texts.
LA
Lamonica
1 year ago
This seems like a straightforward ITIL question. I'll focus on understanding the key elements of the continual improvement model and what information is needed to assess the current state.