IIA-CIA-Part2 practice questions, page 37 of 39, with answer review and explanations.
Question 181
The internal audit activity can be involved with systems development continuously, immediately prior to implementation, after implementation, or not at all. An advantage of continuous internal audit involvement compared to the other types of involvement is that:
The cost of audit involvement can be minimized.
There are clearly defined points at which to issue audit comments.
Redesign costs can be minimized.
The threat of lack of audit independence can be minimized.
Question 182
In a review of an electronic data interchange application using a third-party service provider, the auditor should: I. Ensure encryption keys meet International Organization for Standardization (ISO) standards. II. Determine whether an independent review of the service provider's operation has been conducted. III. Verify that only public-switched data networks are used by the service provider. IV. Verify that the service provider's contracts include necessary clauses, such as the right to audit.
I and II only
I and IV only
II and III only
II and IV only
Question 183
Once an audit report is drafted, the auditor's supervisor should review it primarily to ensure that all:
Statements are supported and can be authenticated.
Recommendations for corrective action are clear.
Processes within the audited area were reviewed.
Sample sizes appear appropriate for any issues found.
Question 184
In preparing to facilitate a control self-assessment session, an auditor would be least likely to ensure that:
Key stakeholders are represented in the group.
An independent content expert is available to help settle disagreements.
Background research is completed to familiarize the auditor with relevant issues.
Management is consulted on the issues and priorities.
Question 185
What decision-making approach should a facilitator initiate if a group addresses an unfamiliar situation during a control self-assessment session?