A.The scope of the review does not need to include all operating areas of the organization.

B.The review should focus on the efficiency of the controls in place to prevent fraud.

C.The review should assess whether the internal controls can be circumvented.

D.The cost of the control should be compared to the benefit of mitigating the related risk.

A.Review of the external auditor's risk assessment.

B.Review of organizational strategic plans and operational plans.

C.Consultation with senior management and the audit committee.

D.Review of corporate performance reporting and benchmarking.

A.Identification of gaps in risk coverage, and minimization of duplicate assurance efforts.

B.Identification of gaps in risk coverage, and consolidation of risk reporting efforts.

C.Resolution of identified testing errors, and minimization of duplicate assurance efforts.

D.Resolution of identified testing errors, and consolidation of risk reporting efforts.

A.The number of customer inquiries recorded per day.

B.The percentage of customer issues resolved within 24 hours.

C.The number of customer complaints recorded per day.

D.The percentage of total customers served per day.

A.Complexity of the corrective action and time period involved.

B.Significance of the reported observation or recommendation, degree of effort, and cost needed to correct the reported condition.

C.Authority and responsibility of the person required to take corrective action.

D.Impact that may result should the corrective action fail.