Which of the following statements about internal audit's follow-up process is true?

A bank uses a risk analysis matrix to quantify the relative risk of auditable entities. The analysis involves rating auditable entities on risk factors using a scale of 1 to 10, with 10 representing the greatest risk. A partial list of risk factors and the ratings given to three of the bank's departments is provided below:

Which of the following statements regarding risk in the department is true?

An organization has an opening for an entry-level internal audit position. When interviewing for the position, which of the following is the least important skill for an entry-level internal auditor?

A chief audit executive (CAE) is evaluating four potential audit engagements based on the following factors: the engagement's ability to reduce risk to the organization, the engagement's ability to save the organization money, and the extent of change in the area since the last engagement. The CAE has scored the engagements for each factor from low to high, assigned points, and calculated an overall ranking. The results are shown below with the points in parentheses:
Risk Reduction Cost Savings Changes
High (3) Medium (2) Low (1)
High (3) Low (1) High (3)
Low (1) High (3) Medium (2)
Medium (2) Medium (2) High (3)
If the organization has asked the CAE to consider the cost savings factor to be twice as
important as any other factor, which engagements should the CAE pursue?

While reviewing the draft report of an audit engagement, the chief audit executive (CAE) is not in agreement with management's acceptance of the potential risk exposure resulting from an observed key control weakness.
Which of the following actions by the CAE would be appropriate for addressing this concern?
* Meet with the auditor-in-charge.
* Discuss with senior management.
* Monitor the result of the accepted risk.
* Report the matter to the board.