An audit of a company's accounts payable found that the individuals responsible for maintaining the vendor master file could also enter vendor invoices into the accounts payable system. During the exit conference, management agreed to correct this problem. When performing a follow-up engagement of accounts payable, the auditor should expect to find that management has:

----
Risk assessments can vary in format, but generally includE.
A description of identified risks.
Tests of audit controls.
A system of rating risks.
Sample size identification.

According to IIA guidance, which of the following is true when the internal audit activity is asked to investigate potential ethics violations in a foreign subsidiary?

During an assurance engagement, an internal auditor noted that the time staff spent accessing customer information in large Excel spreadsheets could be reduced significantly through the use of macros. The auditor would like to train staff on how to use the macros. Which of the following is the most appropriate course of action for the internal auditor to take?

A chief audit executive (CAE) is evaluating four potential audit engagements based on the following factors: the engagement's ability to reduce risk to the organization, the engagement's ability to save the organization money, and the extent of change in the area since the last engagement. The CAE has scored the engagements for each factor from low to high, assigned points, and calculated an overall ranking. The results are shown below with the points in parentheses:
Risk Reduction Cost Savings Changes
High (3) Medium (2) Low (1)
High (3) Low (1) High (3)
Low (1) High (3) Medium (2)
Medium (2) Medium (2) High (3)
If the organization has asked the CAE to consider the cost savings factor to be twice as
important as any other factor, which engagements should the CAE pursue?