IIA-CIA-Part1 Exam - Topic 4 Question 83 Discussion

Actual exam question for IIA's IIA-CIA-Part1 exam

Question #: 83
Topic #: 4

Senior management is eager to assess the organization's risks with regard to electricity sales processes, but the senior management team does not know where to start. How can the internal audit activity assist?

AOutsource the identification of best practices for risk management to an external third party.

BPerform an audit engagement to identify risk management practices deployed in electricity sales processes.

CRecommend reporting the lack of risk management to government authorities and request guidance.

DFacilitate a self-assessment workshop with the employees responsible for process execution.

Show Suggested Answer

Suggested Answer: B

by Tawny at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium IIA-CIA-Part1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ena

5 days ago

Option A is a bit of a cop-out. Why outsource the risk assessment when the internal audit team can handle it?

upvoted 0 times

...

Ernie

10 days ago

Haha, option C is a bit extreme. Reporting to the government might just create more problems than it solves.

upvoted 0 times

...

Jovita

1 month ago

Option D could be a good starting point. A self-assessment workshop with the process owners can help identify the risks and potential improvements.

upvoted 0 times

...

Jin

1 month ago

I agree with option B. An audit engagement can help identify the risks and existing controls in the electricity sales processes.

upvoted 0 times

...

Gilma

1 month ago

Option B seems like the best approach. An internal audit can provide valuable insights into the organization's risk management practices.

upvoted 0 times

...

Robt

2 months ago

Reporting to authorities, as in option C, seems extreme. I think we should focus on internal assessments first.

upvoted 0 times

...

Herminia

2 months ago

I feel like outsourcing to a third party, as in option A, might not give us the internal perspective we need.

upvoted 0 times

...

Veda

2 months ago

I'm not entirely sure, but I think facilitating a workshop, like in option D, could help gather insights directly from employees.

upvoted 0 times

...

Tamekia

2 months ago

I remember we discussed the importance of internal audits in identifying risks, so option B seems like a solid choice.

upvoted 0 times

...

Man

2 months ago

I'm not sure any of these options are perfect. Reporting the lack of risk management to the authorities (option C) could be risky and might not be the best first step. I think I'd go with option B or D to start.

upvoted 0 times

...

Eladia

2 months ago

I'm leaning towards option B as well. Performing a thorough audit seems like the most comprehensive approach to understanding the organization's current risk management practices in the electricity sales processes.

upvoted 0 times

...

Casie

3 months ago

Option D sounds like a good strategy to me. Getting the employees involved in a self-assessment workshop could uncover a lot of valuable insights that the senior team might be missing.

upvoted 0 times

...

Frederick

3 months ago

I'm a bit confused by this question. Shouldn't we be outsourcing the risk assessment to experts? I'm not sure the internal audit team has the right expertise to handle this.

upvoted 0 times

...

Selene

3 months ago

I think option B is the way to go here. An audit engagement to identify the current risk management practices would be a great starting point for the senior management team.

upvoted 0 times

...