Question 11

Which of the following would constitute a violation of the IIA Code of Ethics?
  • Question 12

    Which of the following statements is true regarding the communication of audit engagement observations?
  • Question 13

    While conducting an information security audit, an internal auditor learns that the existing disaster recovery plan is four years old and untested. The auditor also learns that in the four years since the recovery plan was implemented, the information systems have undergone extensive changes. Which of the following actions is most appropriate for the auditor to take?
  • Question 14

    What is the primary factor that determines the depth and breadth of audit follow-up?
  • Question 15

    Which of the following types of resources is the most important and challenging to identify and allocate in order to perform an audit engagement?