IIA Internal Audit Function - IIA-CIA-Part3 Exam Practice Test

Which of the following functions of access control systems involves keeping logs of a user ' s activity in a system?

Internal audit observed an increase in defects of newly installed spare parts. An investigation revealed that vendors delivered spare parts of worse quality than required by contract. Which of the following recommendations would most helpfully mitigate this risk?

According to IIA guidance, whose input must be considered when developing the annual internal audit plan?

A key advantage of developing a computer application by using the prototyping approach is that it:

Which of the following principles s shared by both hierarchies and open organizational structures?
1. A superior can delegate the authority to make decisions but cannot delegate the ultimate responsibility for the results of those decisions.
2. A supervisor ' s span of control should not exceed seven subordinates.
3. Responsibility should be accompanied by adequate authority.
4. Employees at all levels should be empowered to make decisions.

Which of the following forms of compensation best indicates that an organization's cost-saving objectives have been targeted?

Which of the following descriptions of the internal control system are indicators that risks are managed effectively?
* Existing controls promote compliance with applicable laws and regulations.
* The control environment is designed to address all identified risks to the organization.
* Key controls for significant risks to the organization remain consistent over time.
* Monitoring systems are in place to alert management to unexpected events.

During a routine bank branch audit, the internal audit function observed that the sole security guard at the branch only worked part time. The chief audit executive (CAE) believed that this increased the risk of loss of property and life in the event of a robbery. The branch security manager informed the CAE that a full-time guard was not needed because the branch was in close proximity to a police station. Still, the CAE found this to be an unacceptable risk due to the recent increase in robberies in that area. Which of the following is the most appropriate next step for the CAE to take?

Which of the following controls would be most efficient to protect business data from corruption and errors?

When preparing the annual internal audit plan, which of the following should the chief audit executive (CAE) consider to optimize efficiency and effectiveness?

Through meetings with management, an organization ' s chief audit executive (CAE) learns of a risk that exceeds the established risk tolerance. What would be an appropriate next action for the CAE to take?