If management has not established a risk management process, the internal audit activity could.

An organization's accounts payable function improved its internal controls significantly after
it received an unsatisfactory audit report. When planning a follow-up audit of the function, what level of detection risk should be expected if the audit and sampling procedures used are unchanged from the prior audit?

Which of the following is an advantage of email surveys compared to face-to-face interviews?

According to IIA guidance, which of the following statements is true regarding risk management in an organization?

An internal auditor plans to use an analytical review to verify the correctness of various operating expenses in a division. The use of an analytical review as a verification technique would not be a preferred approach if.