A.IT steering committee

B.IT governance committee

C.IT strategy committee

D.IT compliance committee

A.Record the proposed course of corrective action.

B.Validate the audit observations.

C.Assist the management with control enhancements.

D.Identify business risks associated with the observations

A.Automation of operational risk management processes

B.Security enhancements to the customer relationship database

C.Resource optimization of the enterprise resource planning (ERP) system

D.Outsourcing of the payroll system to an external service provider

A.Diagrams of the organization s network architecture are available.

B.The test results will be documented and communicated to management.

C.The environment and penetration test scope have been determined.

D.The management of the client organization is aware of the testing.

A.permit the auditor to quantify and fix the level of risk

B.permit the auditor to quantity the probability of error,

C.require judgment when defining population characteristics

D.provide each item an equal opportunity of being selected.