19. Which of the following actions constitutes a violation of the confidentiality concept regarding working papers? An internal auditor
A. Takes working papers to his or her hotel room overnight.
B. Shows working papers on occasion to engagement clients.
C. Allows the external auditor to copy working papers.
D. Misplaces working papers occasionally.
ANSWER (D) is correct.
REQUIRED: The action violating the confidentiality concept regarding working papers.
DISCUSSION: The internal audit activity controls engagement working papers and provides access to authorized personnel only (PA 2330.A1-1, para. 1). By misplacing working papers occasionally, the internal auditor is thus violating the confidentiality concept.
Answer (A) is incorrect. Continuous physical control of working papers during fieldwork may be appropriate.
Answer (B) is incorrect. Engagement clients may be shown working papers with the CAE's approval.
Answer (C) is incorrect. Internal and external auditors commonly grant access to each other’s work programs and working papers.