To ensure that recommendations for enhancing internal controls have been effectively implemented, the internal auditor should conduct appropriate testing to verify management responses. This involves re- performing procedures, reviewing documentation, and possibly observing operations to confirm that the corrective actions have been adequately executed and are effective. Simply seeking a management assurance declaration (Option B) or observing corrective measures (Option A) may not provide sufficient evidence of proper implementation. Following up during the next scheduled audit (Option C) may delay the verification process, potentially allowing risks to persist.
IIA Standard 2500: Monitoring Progress.
IIA Practice Guide on Follow-up Processes in Internal Auditing.

Internal control questionnaires are used to determine whether specific control procedures are in place within an organization. They help auditors identify the existence and implementation of controls designed to mitigate risks. These questionnaires can provide a preliminary understanding of the control environment and identify areas that may require further detailed testing.
:
The Institute of Internal Auditors (IIA) Practice Guide: Using Internal Control Questionnaires to Assess Risk IIA Standard 2130 - Control

Due diligence engagements are crucial when planning an acquisition, as they evaluate the financial, operational, and legal aspects of the target entity. This ensures informed decision-making and minimizes acquisition risks. Performance engagements (Option A) focus on efficiency and effectiveness of operations, while system security engagements (Option B) and compliance engagements (Option D) do not address the comprehensive assessment required for acquisitions. The CIA syllabus emphasizes due diligence as a specialized type of consulting engagement (Part 2: Section II).

Option D is correct. A balance sheet presents an organization ' s financial position at a particular point in time , showing assets, liabilities, and equity as of a specified date. By contrast, an income statement summarizes revenues and expenses over a period. An owner ' s equity statement explains changes in equity during a reporting period, and a statement of cash flows summarizes cash inflows and outflows over a period.
Therefore, none of Options A through C is principally a point-in-time financial statement. Finance and accounting concepts are expressly included in the current CIA Part 2 Internal Audit Engagement syllabus because auditors may need to interpret financial information when planning and performing engagements.
The distinction is therefore directly relevant to the exam domain, and D is the technically correct answer.