Question 136
Which of the following statements is true regarding the role of the internal audit activity in the organization's risk management process?
Question 137
Which of the following is an indicator of ineffective third-party risk management?
Question 138
Internal auditors must exercise due professional care by considering which of the following?
1. Cost of assurance in relation to potential benefits.
2. Adequacy and effectiveness of governance, risk management, and control processes.
3. Management's competency level in the area being evaluated.
4. Probability of significant errors, fraud, or noncompliance.
1. Cost of assurance in relation to potential benefits.
2. Adequacy and effectiveness of governance, risk management, and control processes.
3. Management's competency level in the area being evaluated.
4. Probability of significant errors, fraud, or noncompliance.
Question 139
Which of the following is true regarding the purpose of the COSO enterprise risk management framework?
It is a process that is ongoing and flows throughout the organization.
It contributes to the formulation of the organization's mission and vision.
It enables internal audit to provide reasonable assurance to an organization's management and the board.
It enables the management of risks within an organization's risk appetite.
It is a process that is ongoing and flows throughout the organization.
It contributes to the formulation of the organization's mission and vision.
It enables internal audit to provide reasonable assurance to an organization's management and the board.
It enables the management of risks within an organization's risk appetite.
Question 140
Which of the following statements best describes the competency requirement for an auditor regarding fraud risks encountered in an engagement execution?