Which two of the following considerations must an internal auditor take into account while planning an audit of an accounting system/application that has been in use for the last five
years?
The level and manner of linkages between the business' mission, objectives, and structure and the accounting system/application.
-
--
Presence or absence of computerized and manual controls that address risks.
Identification of risks at the application level, e.g. availability and security of the
system.
Testing of the system/application for bugs and errors.
-

The chief executive officer has requested that the chief audit executive (CAE) coordinate the establishment of an enterprise risk management (ERM) program for the organization. Which of the following would be the most appropriate action for the CAE?

A fast-food company is developing a computer simulation involving arrival time at a drive-through restaurant. The distribution for arrival times is:
Time
Single-Digit Random
Between Arrivals
Probability
Number Assigned
1 minute
0.1
0
2 minutes
0.2
1, 2
3 minutes
0.3
3, 4, 5
4 minutes
0.4
6, 7, 8, 9
Six random numbers are selected to represent the arrival of six cars: 1, 6, 9, 0, 5, 6. The mean time between arrivals for these cars, in this run of the simulation model, is:

A bank uses a risk analysis matrix to quantify the relative risk of auditable entities. The analysis involves rating auditable entities on risk factors using a scale of 1 to 10, with 10 representing the greatest risk. A partial list of risk factors and the ratings given to three of the bank's departments is provided below:

Which of the following statements regarding risk in the department is true?

The chief audit executive (CAE) of an organization has established an internal audit activity (IAA) quality assessment program. According to IIA guidance, which of the following would be part of this program?