While reviewing the workpapers and draft report from an audit engagement, the chief audit executive (CAE) found that an important compensating control had not been considered adequately by the audit team when it reported a major control weakness. Therefore, the CAE returned the documentation to the auditor in charge for correction. Based on this information, which of the following sections of the workpapers most likely would require changes?

1. Effect of the control weakness

2. Cause of the control weakness

3. Conclusion on the control weakness

4. Recommendation for the control weakness

a. 1, 2, and 3

b. 1, 2, and 4

c. 1, 3, and 4

d. 2, 3, and 4

An internal auditor has been asked to determine whether the controls for the process being audited are designed adequately. Which of the following audit steps would be the most effective for achieving this objective?

1. Select a sample of controls to determine whether the control is being performed consistently

2. Conduct a walk-through of the process using a flowchart and identify key controls

3. Complete a risk and control matrix to identify the key risks and associated mitigating controls

4. Obtain current policies and procedures and validate that they are being followed

1. 1 and 3
2. 1 and 4
3. 2 and 3
4. 2 and 4