Auditing aims to achieve which outcome?

• A. Develop opinions on the health of controls
• B. Punish noncompliance
• C. Implement new policies
• D. Eliminate all risk

Answer: (A)

Auditing revolves around assessing whether controls are designed correctly and operating effectively, and on forming an independent opinion about their health. The value lies in providing assurance to stakeholders, identifying weaknesses, and recommending improvements so that risk is managed more reliably. It is not about punishing noncompliance, nor about implementing new policies—that is up to management. And it cannot eliminate all risk, only reduce it through improvements. Because the essence of an audit is to evaluate control effectiveness and report on it, the outcome described—developing opinions on the health of controls—best captures what auditing aims to achieve.