A chief audit executive (CAE) is determining which engagements to include on the annual audit plan. She would like to consider the organization's attitude toward risk and the degree of difficulty in achieving objectives.
Which of the following resources should the CAE consult?

Which of the following is correct with respect to roles within an enterprise-wide risk management process?
1.The board provides oversight to the risk management process.
2.Executive management owns the risk management framework.
3.Senior management is assigned ownership of risks.
4.Internal audit modifies the risk assessment determined by management.

An internal auditor for a large telecommunications organization identified potential risk factors related to a planned billing system conversion. Which of the following risk factors would present the least potential exposure to the organization?

An auditor is using an internal control questionnaire as part of a preliminary survey. Which of the following is the best reason for the auditor to interview management regarding the questionnaire responses?

Which of the following is true regarding the monitoring of internal audit activities?