Question: 1. An internal auditor determines that the process is not designed adequately to reduce the underlying risks to an acceptable level. Which of the following

1. An internal auditor determines that the process is not designed adequately to reduce the underlying risks to an acceptable level. Which of the following should the internal auditor do next?

a.Write the audit report. Theres no reason to test the operating effectiveness of controls that are not designed adequately.

b.Test compensating controls in other (adjacent) processes to see if the impact of the design inadequacy is reduced to an acceptable level.

c.Test the existing key controls anyway to prove that, despite the design inadequacy, the process is still meeting the process objectives.

d.Postpone the engagement until the design inadequacy has been rectified.

----

2.Which of the following is recommended guidance within the IPPF?

a.The Definition of Internal Auditing.

b.The Standards.

c.Supplemental guidance.

d.None of the above.

----

3. Requiring a user ID and password would be an example of what type of control?

a.Detective

b.Corrective

c.Preventative

d.Reactive

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Accounting Questions!