1. Which of the following should be established FIRST when initiating a control self-assessment program in a small organization?
A) Control baselines B) Client questionnaires C) External consultants D) Facilitated workshops
2. What is an IS auditor's BEST course of action if informed by a business unit's representatives that they are too busy to cooperate with a scheduled audit?
A) Reschedule the audit for a time more convenient to the business unit. B) Notify the chief audit executive who can negotiate with the head of the business unit. C) Begin the audit regardless and insist on cooperation from the business unit. D) Notify the audit committee immediately and request they direct the audit begin on schedule.
3. An IS auditor has completed an audit of an organization's accounts payable system. Which of the following should be rated as the HIGHEST risk in the audit report and requires immediate remediation?
A) Lack of segregation of duty controls for reconciliation of payment transactions B) Lack of segregation of duty controls for removal of vendor records C) Lack of segregation of duty controls for updating the vendor master file D) Lack of segregation of duty controls for reversing payment transactions
4. An IS auditor is planning on utilizing attribute sampling to determine the error rate for health care claims processed. Which of the following factors will cause the sample size to decrease?
A) Population size increase B) Expected error rate increase C) Acceptable risk level decrease D) Tolerate error rate increase
5. Which of the following is the PRIMARY benefit of using an integrated audit approach?
A) Higher acceptance of the findings from the audited business areas B) The avoidance of duplicated work and redundant recommendations C) Enhanced allocation of resources and reduced audit costs D) A holistic perspective of overall risk and a better understanding of controls
Leave a comment