At the conclusion of an audit of an organization's treasury department, a report was issued to the treasurer, chief financial officer, president, and board. Because of the sensitivity of some findings, a follow-up review was performed. The auditor should provide the report of follow-up findings to the.
I. Treasurer.
II. Chief financial officer.
III. President.
IV.
Board.

The board has asked the internal audit activity (IAA) to be involved in the organization's enterprise risk management process. Which of the following activities is appropriate for IAA to perform without safeguards?

The chief executive officer has requested that the chief audit executive (CAE) coordinate the establishment of an enterprise risk management (ERM) program for the organization. Which of the following would be the most appropriate action for the CAE?

According to the International Professional Practices Framework, which of the following statements is correct regarding the communication of audit results?
I.Summary reports may be issued separately from or in conjunction with the final report.
II.
Interim reports may be written or oral.
III.
Detailed reports should always be issued to the audit committee.
IV.
Interim reports should be used to communicate information which requires immediate attention.

A company has recently incurred significant cost overruns on one of its construction projects. Management suspects that these overruns were caused by the contractor improperly accounting for costs related to contract change orders. Which of the following procedures would be appropriate for testing this suspicion?
I.Verify that the contractor has not charged change orders with costs that have already been billed to the original contract.
II.
Determine if the contractor has billed for original contract work that was canceled as a result of change orders.
III.