Free IIA IIA-CIA-Part1-3P Exam Questions

Which of the following statements describes a control failure that is not directly attributable to a customer billing application?

1. End users have raised a number of concerns regarding data integrity.

2. An untested program change is transferred from the test environment to production.

3. Purchase history does not reconcile with accounts receivable for some customers.

4. End user security is inadvertently granted to an unauthorized individual by management.

During fieldwork, an internal auditor located a significant internal control issue. Without identifying the origins of the issue, the auditor concluded the engagement and included the issue in the final audit report. To enhance audit quality, which of the following skills should the internal auditor improve?

The largest risks facing an organization should be mitigated by which type of controls?

Topic 3 - Volume C

An assurance mapping exercise helps an organization do which of the following?

1. Provide assurance to stakeholders that risks are managed and reported, and regulatory and legal obligations are met.

2. Fulfill best practices in the industry.

3. Identify and address any gaps in the risk management process.

4. Identify fraud.