The worked question on this page is original educational practice. It is not represented as a question from an official previous-year examination paper.
01 / UNDERSTANDING
Review the question
Create an original case with a new system and a previously fixed audit calendar. Ask whether the plan should be reconsidered and which risks guide the review. In genuine-paper analysis, separate management control, risk oversight and independent assurance responsibilities, and identify whether the question concerns planning, testing or verification of corrective action.
02 / UNDERSTANDING
The concept in context
Transaction testing can support assurance but should be connected with the wider control objective. Findings need a clear condition, implication and accountable action, followed by verification of the response. An issue reported as closed by its owner still needs appropriate supporting evidence; replacing independent evaluation with the owner's assertion would weaken the assurance process.
03 / UNDERSTANDING
A worked learning case
A fictional bank introduces a new lending workflow while another established process remains unchanged and well controlled. Audit revisits its plan to examine the new workflow's authority checks, data transfer and exception handling. It samples transactions to test those objectives, then verifies the remediation evidence for any weakness rather than assuming management's closure label completes the assurance task.
ORIGINAL EDUCATIONAL PRACTICE
Try it before you check.
Why should a major process change affect a risk-based audit plan?
Show the answer and reasoning
It can change inherent exposure, control reliability and the evidence needed for assurance.
A previous assessment reflects the process and evidence available at that time. New systems, roles or transaction paths can introduce different failure points and invalidate assumptions about existing controls. Audit should reassess those changes independently and target appropriate assurance work, rather than infer that an unchanged calendar still covers the institution's material risks.
Two traps to watch for.
- Treating audit as the owner responsible for operating the business control.
- Closing a finding solely because the action owner says it is resolved.
YOUR TOPIC-SPECIFIC LEARNING MAP
Learn from the attempt
Connect the audit objective with a material process risk.
Choose testing evidence that addresses the control's intended purpose.
Describe how remediation will be independently verified.
Explain the idea, apply it to a new situation, then check what changed in your reasoning.
BANKERS TUTORIAL · SOURCE NOTES
Keep the source alongside your notes.
Official links provide subject context and authoritative reference material. This guide’s explanation, scenario and question are original Bankers Tutorial learning content.
- iibf.org.in https://iibf.org.in/caiib-certified-associate-IIBF
- iibf.org.in https://iibf.org.in/documents/RulesSyllabus/2026/FlagshipCourses/60%20-%20CAIIB_24.07.25_Change_Final%20Website_23.02.2026.PDF
- www.rbi.org.in https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=1021
For CAIIB preparation, check the current official notice before relying on changing dates, rules or examination requirements.
