Internal control processes in an organization require that all investments exceeding $20, 000 receive authorization from both the president and treasurer. After conducting a sample of these transactions, an auditor determined that 10 of the 500 investments in the sample had not included both required authorizations.
The sample has a five percent acceptable error rate. Based on this sample, which of the following actions should the auditor take?

A chief audit executive (CAE) is currently employed at a commercial bank where she was previously the chief compliance officer over three years ago. The current chief compliance officer abruptly resigned prior to the start of a mandatory anti-money laundering compliance audit. The board is contemplating a number of alternatives regarding the vacant post, bearing in mind that the bank has been struggling financially and is looking to contain costs. Which of the following alternatives, if taken by the board, would be most appropriate to satisfy the bank's objectives as well as preserve the internal audit activity's independence?

Who has the ultimate responsibility of implementing the organization's governance system?

Which of the following statements regarding segregation of duties is true?

Which of the following statements is correct regarding risk analysis?