IIA IIA-CIA-Part2 Quiz 47 Topic 2 Questions 231-235

Question: 1

A code of business conduct provides:

AA fraud avoidance plan that does not explicitly describe punishments for violations.

BA passive method of fraud deterrence.

CA program to anonymously report irregularities to authorities.

DAn alternative to 'tone at the top' programs.

Show Answer

Question: 2

The chief executive officer has requested that the chief audit executive (CAE) coordinate the establishment of an enterprise risk management (ERM) program for the organization. Which of the following would be the most appropriate action for the CAE?

AAccept the request as the role of coordinating ERM is a core function of internal audit.

BDecline the request as this role compromises the CAE's objectivity.

CAccept the request after consulting with the board and adhering to proper safeguards.

DDecline the request as internal audit has limited knowledge and experience of risk at the enterprise level to undertake the assignment.

Show Answer

Question: 3

Which of the following actions is related to the preliminary survey process?

ADetermining if controls are effective.

BPreparing the engagement work program.

CIdentifying the current controls.

DCompleting a detailed test of controls.

Show Answer

Question: 4

Risk assessments can vary in format, but generally include:

1. A description of identified risks.

2. Tests of audit controls.

3. A system of rating risks.

4. Sample size identification.

A1 and 2 only

B1 and 3 only

C1, 3, and 4 only

D2, 3, and 4 only

Show Answer

Question: 5

An internal auditor has just undertaken an organization-wide risk assessment. In identifying potential audit engagements the internal auditor should consider least:

AFocusing on the high risk areas as sources of potential engagements.

BFocusing in areas not audited last year.

CFactoring in management requests.

DFocusing on those risks highlighted by the external auditor.

Show Answer

IIA IIA-CIA-Part2 Quiz:47 Topic:2 Questions:231-235