Skip to main content
CIA Part 1 · Study notes

CIA Code of Ethics cases under the current Standards

For current CIA preparation, apply ethical cases through the Ethics and Professionalism domain of the Global Internal Audit Standards. Choose the action that protects truthful reporting, unbiased judgment, suitable expertise, and proper use of information. A manager’s instruction does not make an unethical action acceptable.

Workplace pressure and a defensible response

  • Suppress a supported finding

    Retain the evidence-based issue and use the appropriate communication or escalation process.

    Avoid: Removing it because a senior manager says the timing is inconvenient.

  • Use confidential information personally

    Keep audit information within its authorized purpose and audience.

    Avoid: Using unreleased acquisition information for personal trading.

  • Hide a competence gap

    Arrange qualified help and be transparent about the limits of the work.

    Avoid: Signing a technical conclusion because nobody has challenged your expertise.

A decision path you can use

  1. 1Identify the proposed action
  2. 2Test the ethical duty it threatens
  3. 3Choose a concrete protective response

Understand the method

Work through the reasoning

Apply the current ethical duties to the conduct in the case

Older study material often groups internal audit ethics under integrity, objectivity, confidentiality, and competency. The current Standards place ethical and professional responsibilities within their Ethics and Professionalism domain. When a question uses older “Code of Ethics” language, identify the conduct and the relevant duty rather than assuming the historical label changes the substance of the problem.

This lesson applies duties to decisions rather than reproducing a code as a memory list. Ask what the person is about to do, who could be affected, and what professional obligation is at stake. A gift, altered workpaper, or inappropriate disclosure may involve more than one duty. Choose the response that addresses the conduct and its consequences, not merely the answer containing the most ethical-sounding word.

Case pattern: a benefit offered during an unresolved finding

A benefit can threaten objectivity even if it is described as training, hospitality, or appreciation. Consider who offers it, its value and nature, its timing, and the applicable policy. An expensive benefit offered by the manager whose finding remains unresolved creates a different concern from ordinary refreshments available to everyone at a meeting.

Do not wait for an explicit request to change the finding. Actual or perceived influence can arise without a written bargain. Apply the policy, disclose the circumstances as appropriate, and address the threat before accepting. A later note in the workpaper does not necessarily cure acceptance of an inappropriate benefit or restore trust in the resulting judgment.

Case pattern: changing a record after the conclusion

Correcting a genuine workpaper error is appropriate when the correction is transparent and supported. Rewriting the record to conceal missing work or to make an unsupported conclusion appear justified is different. Look at the reason for the change and whether the resulting record accurately represents the procedures, evidence, review, and timing.

If a supervisor asks for a conclusion that the evidence cannot support, clarify the evidential gap and use the appropriate escalation route if it remains unresolved. Avoid both silent compliance and unsupported accusations about the supervisor’s intent. Preserve an accurate record and seek a response that repairs the work or changes the conclusion rather than disguising the deficiency.

Case pattern: helpfulness becomes unauthorized disclosure

An auditor may be asked to share payroll details with a colleague who says they need them for an unrelated project. The fact that both people work for the same employer does not automatically establish a legitimate need or authorized use. Clarify the purpose, access entitlement, required detail, and approved transmission method before sharing.

A de-identified summary may meet a legitimate need where identifiable records would create unnecessary exposure. However, reducing detail is not a universal permission to disclose; the purpose and authority still matter. In an exam scenario, choose the response that preserves authorized use and appropriate protection while allowing legitimate work to proceed through the correct channel.

Original teaching example

Apply the method to a decision

The scenario

Before a committee meeting, a manager asks an auditor to delete a supported finding until after the manager’s promotion review. No new evidence changes the finding.

The decision

Do not remove the issue for that reason; discuss and escalate the pressure through the audit reporting process.

Constructive wording and factual corrections are appropriate. Concealing a supported issue to influence a personal outcome is different. Preserve the record of the evidence and the request so the response can be reviewed.

Independent hypothetical case. It is not an official IIA question, an actual investigation, or a scoring prediction.

A second application

The requested edit is more than a wording change

The situation

A supervisor asks an auditor to remove a note that a key population could not be reconciled. The proposed conclusion says the sample represents all transactions. The supervisor says the note will only confuse readers.

Reason through it

The unreconciled population affects the basis for the conclusion. Removing the note without resolving the gap would make the work appear stronger than it is. The auditor should explain the implication, seek the missing reconciliation or an appropriate limitation, and follow escalation procedures if pressure continues.

Take the decision

An accurate, supported conclusion takes priority over a cleaner-looking record. Repair the evidence or qualify the assertion rather than erasing the uncertainty.

Original hypothetical teaching case.

Check your understanding

Choose the best answer, then check the reasoning for each alternative. These short learning checks are not a full exam simulation. Answers are not saved or sent.

Question 1: A manager wants a supported finding removed before a promotion review. Which additional fact would justify revising the finding on its merits?
Compare all three choices
A. Reliable new records show that the reported exception did not occurBest answer
A finding should change when dependable evidence changes its factual basis. Verify the new records and preserve the reason for the revision.
B. The manager commits to remediate the issue immediately after promotion
A remediation commitment may affect the action plan or reporting context. It does not erase the supported condition.
C. The audit committee has previously expressed confidence in the manager
Confidence in an individual is not evidence that the documented exception is inaccurate.
Question 2: A workpaper contains a genuine arithmetic error discovered after review. Which correction best preserves integrity?
Compare all three choices
A. Replace the number and remove all evidence of the earlier version
Concealing the change can misrepresent the record and prevent reviewers from understanding its significance.
B. Leave the known error unchanged because review is complete
Completed review does not justify retaining a known error that may affect the reported result.
C. Correct it transparently, assess the effect on conclusions, and document appropriate reviewBest answer
A transparent correction and impact assessment preserve an accurate record and the reliability of the conclusion.
Question 3: A colleague requests identifiable salary data for an unrelated project. What should the auditor establish first?
Compare all three choices
A. Whether the purpose and access are authorized and what information is necessaryBest answer
Authorized purpose, entitlement, and necessity determine whether and how the information may appropriately be shared.
B. Whether the colleague promises to delete the email
A deletion promise does not establish a lawful or authorized purpose for the initial disclosure.
C. Whether the data would make the colleague’s presentation more convincing
Presentation value does not override confidentiality and appropriate-use responsibilities.

Questions about this topic

How do older Code of Ethics notes relate to the current Standards?

The current Global Internal Audit Standards address ethics through Domain II, Ethics and Professionalism. When using older notes, connect the ethical duty to the current requirement and its application. Do not assume that the former separate code is the complete current framework.

Can one scenario involve several ethical duties?

Yes. Concealing an evidence gap may involve integrity, due care, and objectivity under pressure. Identify the decisive conduct and choose a response that addresses the underlying problem rather than forcing the case into only one label.

Sources and syllabus scope

Prepared by MiloPrep editorial team. Source links checked 2026-10-10. These notes and cases are independent teaching material; the IIA sources do not verify or endorse them.

IIA expanded syllabus

Establishes the examined topics. Primary domain: Ethics and Professionalism (20% of Part 1). This is a domain allocation, not a separate weight for this lesson.

Global Internal Audit Standards reference
Locator: Domain II; Standards 1.1, 2.1, 3.1, 5.1-5.2, and 14.6. Supports the professional requirements cited here; our scenarios and solution steps are original applications. Current IIA Standards resources.

Part 1: Internal Audit Fundamentals. Selected learning notes, not complete curriculum coverage. Browse all CIA topics.