Consolidated financial statements present the financial position and results of a parent and its subsidiaries as one economic entity. A risk is that poor performance of an individual subsidiary may be concealed within the group's overall results, especially if stronger entities offset weak results. Option B is generally incorrect because consolidation is designed to reflect entities under common control. Option C is not the main risk because consolidated statements do show the group's combined assets, liabilities, equity, income, and cash flows. Option D is incorrect because intercompany transactions should be eliminated during consolidation, not included in a misleading way. Internal auditors should consider subsidiary-level performance, consolidation adjustments, eliminations, and disclosure quality. Therefore, Option A is correct.

E-commerce transactions involve multiple security layers to ensure the protection of customers ' sensitive financial information. The correct answer is D, as payment gateways serve as intermediaries that authorize online credit card transactions by securely transmitting the payment details to the bank or card networks for approval. Let's examine each option carefully:
Option A: HTTP sites provide sufficient security to protect customers ' credit card information.
Incorrect. HyperText Transfer Protocol (HTTP) does not provide encryption, meaning that data transmitted over an HTTP connection can be intercepted by malicious actors. Instead, Secure HTTP (HTTPS), which uses Secure Sockets Layer (SSL) or Transport Layer Security (TLS), is required to encrypt the data.
IIA Reference: Internal auditors evaluating e-commerce security should verify that organizations use HTTPS for secure transactions. (IIA GTAG: Information Security Governance) Option B: Web servers store credit cardholders ' information submitted for payment.
Incorrect. While web servers may temporarily process customer data, they should not store sensitive credit card information due to security risks. Instead, organizations follow the Payment Card Industry Data Security Standard (PCI DSS), which mandates secure storage and encryption protocols.
IIA Reference: IIA Standards recommend compliance with PCI DSS to protect sensitive payment information. (IIA Practice Guide: Auditing IT Governance) Option C: Database servers send cardholders' information for authorization in clear text.
Incorrect. Transmitting cardholder data in clear text is a severe security vulnerability. Secure encryption protocols such as SSL/TLS or tokenization must be used to protect data in transit.
IIA Reference: Internal auditors should ensure encryption measures are in place for financial transactions.
(IIA GTAG: Auditing Cybersecurity Risk)
Option D: Payment gateways authorize credit card online payments.
Correct. Payment gateways act as secure intermediaries between merchants and payment processors, verifying the transaction details before authorization. This ensures a secure transaction by encrypting sensitive data before transmitting it for approval.
IIA Reference: IIA guidance on IT controls emphasizes the importance of secure payment processing through payment gateways. (IIA GTAG: Managing and Auditing IT Vulnerabilities)

A provision is a liability of uncertain timing and amount A liability is a present obligation arising from past events, the settlement of which is expected to result in an outflow of resources embodying economic benefits. Whether a past event results in a present obligation is usually clear. Thus, it is clear from the circumstances that the entity's sale of goods without warranty is an obligating event that resulted in a present obligation for the issuance of warranty costs. Recognition of provisions is appropriate when the entity has a legal or constructive present obligation resulting from a past event (called an obligating event), it is probable that an outflow of economic benefits will be necessary to settle the obligation, and its amount can be reliably estimated. Assuming that the amount of warranty costs can be reliably estimated all though they are uncertain in timing and amount compared with a trade payable, for example) and that the outflow is probable in these circumstances, "more likely than not"), the manufacturer's contractual present obligating should result in recognition of a provision.

Working capital = Current Assets - Current Liabilities
A high amount of working capital compared to industry averages suggests that the organization may not be efficiently using its resources. This could mean that:
* Excess cash is invested in inventory or accounts receivable, instead of being used for growth, investment, or shareholder returns.
* The company may be holding too much inventory, which could lead to obsolescence or additional storage costs.
* The business may have slow turnover in receivables, meaning cash is not being collected efficiently.
* A. Settlement of short-term obligations may become difficult. (Incorrect)
* A high working capital means the organization has sufficient assets to cover short-term obligations, so liquidity issues are unlikely.
* B. Cash may be tied up in items not generating financial value. (Correct)
* High working capital may indicate inefficient use of assets, such as excess inventory, high accounts receivable, or idle cash.
* This can negatively impact return on assets (ROA) and overall financial performance.
* C. Collection policies of the organization are ineffective. (Incorrect)
* While high receivables can be a factor, working capital includes all current assets and liabilities
, not just accounts receivable.
* The issue could be inventory mismanagement or excess liquidity, not just collection policies.
* D. The organization is efficient in using assets to generate revenue. (Incorrect)
* A high working capital does not necessarily mean efficiency. In fact, it may indicate underutilized resources rather than optimized performance.
* IIA GTAG 3 - Continuous Auditing: Implications for Internal Auditors highlights the importance of monitoring key financial metrics such as working capital.
* IIA Practice Advisory 2130-1 - Assessing Organizational Performance emphasizes that internal auditors should assess whether financial resources are being used efficiently.
* Financial Management Principles (IIA Guidance) discuss the impact of excessive working capital on liquidity and return on investment.
Explanation of Answer Choices:IIA References:Thus, the correct answer is B. Cash may be tied up in items not generating financial value.