Which Document Includes an Audit's Quality Assurance Process?
Short answer
A The audit charter formally establishes and mandates the department-wide Quality Assurance and Improvement Program framework.
Question
Key Takeaways
Tests knowledge of audit governance documentation, with the common trap being confusing operational evaluation tools (post-audit reviews) with the foundational governing document that mandates QA.
The audit charter formally establishes the internal audit function's framework and mandates compliance with the IIA's Quality Assurance and Improvement Program, aligning with expert consensus despite community debate over post-audit reviews.
Common mistake: Post-audit review (B) is frequently chosen because it directly evaluates audit performance, but it is an operational activity rather than the foundational document that establishes the overarching QA framework.
Expert Analysis
Why the Answer Is Correct
The audit charter serves as the formal mandate for the internal audit department and must explicitly reference compliance with the IIA Standards. Per International Professional Practices Framework (IPPF) Standard 1300, the charter should state that the audit activity maintains a Quality Assurance and Improvement Program covering all aspects of conformance. This makes it the primary document establishing the QA process rather than just executing it.
Why the Other Options Are Wrong
A post-audit review is a tactical step within the QA program, not the governing document itself. Audit scope focuses on specific engagement boundaries, while the audit report details final findings. These options confuse operational execution with the foundational governance document that mandates the entire QA framework.
Community Comment Notes
Candidates are frequently split between the charter and post-audit reviews, but authoritative references like comment [1] and [4] correctly cite IIA requirements linking the charter to the QA program. Comment [3] accurately explains that the charter sets the foundational framework for quality assurance across all engagements. While some argue for post-audit reviews, they overlook the critical distinction between a procedural activity and the official governing document.
Official Reference
This link opens the official vendor documentation in a new tab.
Exam Strategy
Always distinguish between governing documents (charters, policies) and operational procedures (reviews, reports) when questions ask about frameworks or mandates. Look for keywords like 'formally establish,' 'mandate,' or 'framework' to point toward the charter.
Frequently Asked Questions
Why isn't post-audit review the correct answer?
Does the audit charter detail specific QA testing steps?
Community Votes
50% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
Swallows 👍 2 Answered AThe audit charter typically outlines the overall framework, objectives, scope, and responsibilities of the audit, including its quality assurance (QA) processes. It sets the foundation for the audit and includes details on how quality will be ensured throughout the audit process. While the other documents might touch upon QA processes, the audit charter is specifically designed to establish these processes from the outset.
-
jan1234 👍 2 Answered BThe correct answer is B. Post-audit review. A post-audit review is a process that evaluates the quality of an audit engagement after its completion. It assesses the effectiveness of the audit process, identifies areas for improvement, and provides recommendations for enhancing the quality of future audits. This review is a key component of an audit's quality assurance (QA) process.
-
PurpleParrot 👍 2 Answered AAs per the IIA, an audit charter should have Quality Assurance and Improvement Program. Option A is correct
-
ruckie 👍 1"Quality Assurance and Improvement Program – The charter should include: o A statement that the internal audit activity will maintain a quality assurance and improvement program that covers all aspects of the internal audit activity including its evaluation of conformance to IIA Standards. o A requirement for the CAE to report periodically the results of its quality assurance and improvement program to senior management and the governing body..." this doesn't itemize the process so B is most accurate
-
RS66 👍 2 Answered BB. Post-audit review
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All CISA Questions
Access 400 questions with complete answers and detailed explanations.
View Full CISA Practice Test →