7. The internal auditor has gained an understanding of the design of an engagement client's internal controls. The most appropriate next step is to
A. Test controls to determine whether they are functioning as designed.
B. Halt the engagement and issue a report about inadequate controls.
C. Draw preliminary conclusions about internal control.
D. Contact the engagement client's direct supervisor to recommend that the head of the department or function under audit is transferred or terminated.
ANSWER (C) is correct.
REQUIRED: The most appropriate next step after determining that auditee internal controls are inadequate.
DISCUSSION: Internal auditors gain an understanding of the design of the engagement client's internal controls. The auditors then draw conclusions about whether internal controls are designed adequately to achieve management's control objectives.
Answer (A) is incorrect. If controls are poorly designed, testing their operation is most likely a poor use of audit resources.
Answer (B) is incorrect. A determination that internal controls are inadequate is not sufficient grounds for halting a scheduled engagement.
Answer (D) is incorrect. Advising on such personnel matters is not an appropriate internal audit function.