When assessing the adequacy of a risk mitigation strategy, an internal auditor should consider which of the following?
1) Management’s tolerance for specific risks.
2) The cost versus benefit of implementing a control.
3) Whether a control can mitigate multiple risks.
4) The ability to test the effectiveness of the control.
Which of the following is the best reason for considering the acquisition of a nondomestic organization?
A holding company set up a centralized group technology department, using a local area network with a mainframe computer to process accounting information for all companies within the group. An internal auditor would expect to find all of the following controls within the technology department except:
The audit committee of a global corporation has mandated a change in the organization's business ethics policy. Which of the following approaches describes the best way to accomplish the policy's diffusion worldwide?
Which is the least effective form of risk management?
Which of the following are included in ISO 31000 risk principles and guidelines?
When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
International marketing activities often begin with:
Which of the following statements is true regarding the resolution of interpersonal conflict?
Which of the following COSO internal control framework components encompasses establishing structures, reporting lines, authorities, and responsibilities?
