Section: Volume B

According to IIA Standards, acceptable practices for testing conformance through a quality assurance review include conducting a self-assessment with independent validation (2) and arranging for reciprocal peer review with another CAE (4). These methods provide a cost-effective and practical approach to ensuring compliance with professional standards, especially for small internal audit activities. Using an external service provider (1) and arranging for a review by qualified employees outside of the IAA (3) are also valid, but self-assessment with independent validation and peer review are specifically highlighted for smaller IAAs. References: IIA Standard 1312 - External Assessments, IIA Practice Guide - Quality Assurance and Improvement Program

Internal auditors must corroborate employee testimonials with tangible evidence to ensure the reliability and validity of the findings. Relying solely on testimonials without supporting evidence can lead to inaccurate conclusions. Standard 2310 - Identifying Information of the International Standards for the Professional Practice of Internal Auditing emphasizes that sufficient, reliable, relevant, and useful information should be obtained to achieve the engagement's objectives.References:
* Institute of Internal Auditors (IIA), International Standards for the Professional Practice of Internal Auditing (Standards), Standard 2310 - Identifying Information.