Identifying relevant risk factors (e.g. Complexity of programs, size of program, adequacy of internal control system)
Prioritizing Risks
Determine the need for external assistance of outsourcing
Question 38
Which of the following steps is/are NOT considered in the audit planning process?
Identifying what is to be audited?
Assess risk and vulnerability
Determine how to manage the risks
Develop specific issues and Questions for the audit
Question 39
Following is a list of background items auditors should review to determine their impact on audit objectives EXCEPT:
The history of the program or entire organization
Results of prior audits and their working papers
Applicable laws, rules and regulations. Specific items usually set forth in laws and regulations include the following: What the program is supposed to do? Who is supposed to do it? How much can be spent on what?
Audit methods, strategies, tests, analysis and comparisons
Question 40
Auditors can use background information to define and modify:
Scope of the audit
The likelihood that a risk will occur
Activity reports
Audit Criteria (Reasonable, attainable, and relevant)