Which of the following would be a legitimate action for the internal auditor to take when monitoring audit engagement results?
Disregard a certain risk because management and the board accepted the risk in the past.
Abdicate the responsibility for a particular risk because it is not part of the audit plan.
Obtain agreement from senior management that unresolved audit issues will be reported to the board.Request corrective action from management in writing.

Controls are implemented to:

An auditor receives anonymous information that fraud is occurring in the operation being audited, but no details are given as to the type of fraud or the individuals involved. There are several areas in which fraud could occur.
The auditor should:

In a payroll audit, a staff auditor suspects that signatures on some of the documents being sampled for examination are not authentic. What action should the auditor take before proceeding with the examination?

Which of the following is a red flag associated with fictitious revenues?