Which of the following is included in the purpose of internal auditing to create, protect, and sustain value?

• A. Independent, risk-based assurance, advice, insight, and foresight
• B. Fast-tracked approvals
• C. Mandatory certification of staff
• D. External audit replacement

Answer: (A)

The main concept being tested is what internal auditing aims to provide to create, protect, and sustain value for the organization. The best answer emphasizes independence, a risk-based approach, and a broad set of services—assurance plus advice, insight, and foresight. Independence ensures objective assessment without management influence, so findings and recommendations reflect reality rather than politics or pressure. A risk-based focus means auditing concentrates on the areas that pose the greatest potential impact to objectives, rather than checking random or low-risk activities. Beyond simply evaluating controls, offering advice, insight, and foresight helps leaders understand not only what happened and why, but also how to improve governance, risk management, and controls now and in the future. This combination directly supports building and safeguarding value over time.

Fast-tracked approvals, mandatory staff certification, and replacing external audits do not align with the role of internal audit. Fast-tracked approvals are a management process issue, not an audit objective. Mandatory staff certification is an HR function. Replacing external audits would undermine independence and go beyond the audit function’s scope, which is to provide independent assurance and advisory services, not to replace independent external assessments.