An organization is considering outsourcing its IT services, and the internal auditor is assessing the related risks. The auditor grouped the related risks into three categories:
Risks specific to the organization itself.
Risks specific to the service provider.
Risks shared by both the organization and the service provider.
Which of the following risks should the auditor classify as specific to the service provider?

An organization allows employees to use mobile devices for business purposes.
Which of the following could cause decreased employee productivity in case of data loss?

While reviewing the contracts for a large city, the internal auditor learns that the organization contracted to perform trash collection is paid based on the number of bins emptied each week as a result, the city has minimal control over payments Which of the following actions should the auditor recommend to give the city greater control over payments?

A chief audit executive wants to implement an enterprisewide resource planning software.
Which of the following internal audit assessments could provide overall assurance on the likelihood of the software implementation's success?

Management has established a performance measurement focused on the accuracy of disbursements The disbursement statistics, provided daily to all accounts payable and audit staff, include details of payments stratified by amount and frequency Which of the following is likely to be the greatest concern regarding this performance measurement?