A senior auditor signs off on a workpaper at 11 p.m. the night the report is due. The testing was done three weeks earlier. Every conclusion in that file is now supported by a review that could not have changed anything.
Engagement supervision is the continuous process of directing, reviewing, and supporting the engagement team so the objectives are achieved, the work conforms to the Global Internal Audit Standards, and the conclusions are supported. It is not a single review event at the end. The Global Internal Audit Standards anchor it at Standard 13.6 (Engagement Supervision), sitting inside the performance domain.
The chief audit executive holds ultimate responsibility for supervising every engagement. That responsibility can be delegated to experienced members of the internal audit function, but accountability does not transfer. A chief audit executive who delegates review to a senior auditor is still answerable for the quality of the file.
KEY: Supervision extent is calibrated to two variables: the competence and experience of the auditors assigned, and the complexity or risk of the engagement.
Common mistakes
- Treating supervision as end-of-engagement review. Approving the workprogram before fieldwork is a supervisory act. A lesson stem that starts supervision at the workpaper stage has already skipped planning.
- Assuming delegation transfers accountability. The chief audit executive may delegate review to experienced staff but remains responsible for the engagement's quality.
- Assigning on competence alone. The auditor who ran the process eight months ago is inside the one-year cooling-off expectation and cannot test it, regardless of expertise.
Bottom line
- Supervision is continuous across planning, fieldwork, reporting, and follow-up, not a terminal review event.
- Responsibility: the chief audit executive owns engagement supervision and may delegate the work to experienced staff, but not the accountability.
- Extent scales with two factors: auditor competence and experience, and engagement complexity and risk. It never scales to zero.
- Planning acts: approve the risk assessment, objectives, scope, resourcing, and the workprogram before fieldwork starts.
Exam shortcut
Read the stem for who signed and when. If review happened only after fieldwork ended, the defect is timing, and the correct answer names supervision during planning and fieldwork. Stem signals: "experienced team" means reduced supervision, never eliminated, so any option saying review was unnecessary is wrong. "Recently transferred from the department" means objectivity, and reassignment beats extra review.
The full lesson (about 2,031 words, 14 min read) adds 2 worked examples, all 6 common mistakes, a self-check, free in the app.
Learning objectives
- 1
Browse all free CIA Part 2 lessons or jump into free CIA Part 2 practice questions.