An internal audit charter should do which of the following?

An organization has developed a large database that tracks employees, employee benefits, payroll deductions, job classifications, and other similar information. In order to test whether data currently within the automated system are correct, an auditor should:

A senior manager asks the chief audit executive (CAE) to explain why statistical sampling is the best method to use in conducting an internal audit. Which advantages should the CAE point to in order to justify the internal audit activity's (IAA) use of statistical sampling?

When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:

Which of the following factors is not likely to affect the level of inherent risk associated with an application system?