The rotational model of internal audit staffing involves bringing in staff from other parts of the organization for a temporary period before they return to their original roles. While this model has several advantages, such as bringing diverse perspectives and business knowledge, it also has the disadvantage that auditors are often new to the internal audit function and are continuously in training.
* Rotational Model:
* In this model, employees from various departments are rotated into the internal audit activity for a specific period. They gain audit experience before rotating back to their original or other roles within the organization.
* Disadvantages:
* Since these individuals are not career auditors, they may lack the deep audit expertise of career auditors, and a significant amount of time is often spent on training. This constant influx of new, inexperienced staff can lead to a scenario where the team is always in training mode, potentially impacting audit efficiency and effectiveness.
* IIA Practice Advisory 1210-1:
* The advisory notes that while the rotational model can enhance business understanding within the audit team, it requires careful management to ensure that audit quality is not compromised due to the continuous learning curve of rotating staff.
* Option A (Career model): This involves auditors who remain in the internal audit function throughout their careers, leading to a highly skilled and experienced team.
* Option B (Center of competence model): This model focuses on a centralized group of audit experts, ensuring specialized skills and consistency.
* Option D (Hybrid model): This combines elements of the rotational and career models, aiming to balance expertise with fresh perspectives.
Detailed Explanation:Why Not Other Options?

Trend analysis is the analytics procedure that an internal auditor would use to compare performance information from one quarter to another. This technique involves analyzing data over a specific period to identify patterns, trends, and changes in performance metrics. Trend analysis helps auditors understand the direction of key performance indicators and assess whether performance is improving, declining, or remaining stable.
Reference:
The Institute of Internal Auditors (IIA) Standards
Data Analytics Techniques in Internal Auditing

According to IIA guidance, risk assessment is a critical step that precedes the development of audit engagement objectives. The risk assessment process helps internal auditors identify the key areas of risk within the organization, which then informs the setting of appropriate objectives for the audit engagement.
* IIA Standard 2201 - Planning Considerations:
* This standard requires internal auditors to consider risk when planning an engagement. The risk assessment process identifies the areas of highest risk, which allows the auditor to focus on the most critical issues during the engagement.
* Role of Risk Assessment:
* By assessing risks, the auditor can determine which processes or controls are most likely to affect the achievement of the organization's objectives. This understanding is essential for setting the audit engagement's objectives, ensuring that they are aligned with the areas of greatest concern.
* IIA Practice Advisory 2210.A1-1:
* The advisory suggests that auditors should use the results of the risk assessment to establish the scope, objectives, and priorities of the engagement. Without this risk assessment, the audit objectives may not fully address the most significant risks.
* Option A (Identification of controls): This typically occurs after the objectives are set, as controls are evaluated based on the identified risks.
* Option B (Scope establishment): The scope is determined after the objectives are set, which are based on the risk assessment.
* Option D (Review of resources): This step is related to the allocation of resources after the objectives and scope are defined.
Detailed Explanation:Why Not Other Options?