Certified Internal Auditor - Part 1,The Internal Audit Activity's Role in Governance,Risk,and Control v8.0

The primary reason that a bank would maintain a separate compliance function is to:

Which of the following would be the most useful in developing an annual audit plan?

An organization has developed a large database that tracks employees,employee benefits,payroll deductions,job classifications,and other similar information. In order to test whether data currently within the automated system are correct,an auditorshould:

Which of the following is not an appropriate role for internal auditors after a disaster occurs?

To identify those components of a telecommunications system that present the greatest risk,an internal auditor should first:

In advance of a preliminary survey,a chief audit executive sends a memorandum and questionnaire to the supervisors of the department to be audited. What is the most likely result of that procedure?

Which of the following would be most effective in determining if the percentage of medication orders containing errors improved after a hospital installed a computerized medication-tracking system?

Which of the following lists the audit activities in the order in which they would generally be completed during a preliminary survey?
I. Write detailed audit procedures.
II.Identify client objectives,goals,and standards.
III.Identify risks and controls intended to prevent associated losses.
IV.Determine relevant engagement objectives.

An organization has a policy requiring two signatures on all checks written for amounts in excess of $10,000. When evaluating controls over disbursements,an auditor would conclude that a greater risk existsif.

In order to ensure that the internal auditors have the objectivity required by the
Standards,the chief audit executiveshould:

Which of the following would be the best source of information for a chief audit executive to use in planning future audit staff requirements?

In order to save time,an audit manager no longer required that a standard internal control questionnaire be completed for each audit engagement. Does this represent a violation of the Standards?

Inadequate risk assessment would have the strongest negative impact in which of the following phases of an audit engagement?

An internal auditor is assigned to conduct an audit of security for a local area network
(LAN) in the finance department of the organization. Investment decisions,including the use of hedging strategies and financial derivatives,use data and financial models which run on the LAN. The LAN is also used to download data from the mainframe to assist in decisions.
Which of the following should be considered outside the scope of this security audit engagement?