A new company's risk management function is developing its cybersecurity risk management program Which of the following actions should be the first priority when developing the program?

Which of the following is the most appropriate way to ensure that a newly formed internal audit activity remains free from undue influence by management?

Which of the following statements is the most appropriate for a chief audit executive to include in the internal audit policy manual in order to promote objectivity?

Which of the following organizations has reached the most mature level of corporate social responsibility?

According to IIA guidance, which of the following is true of the internal audit activity's quality assurance and improvement program?
1 Monitoring the internal audit activity's performance must be ongoing
2 All aspects of the internal audit activity should be evaluated
3 The requirement for external assessments can be satisfied through self-assessments that are validated by an independent external party
4 The review of assurance services should be the primary focus