Question 6
The first stage in the development of a crisis management program is to:
- Formulate contingency plans.
- Conduct a risk analysis.
- Create a crisis management team.
- Practice the response to a crisis.
Question 7
When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
- Identifying risks to the organization's operations.
- Observing and analyzing controls.
- Prioritizing known risks.
- Reviewing organizational objectives.
Question 8
The decision to implement enhanced failure detection and back-up systems to improve data integrity is an example of which risk response?
- Risk acceptance.
- Risk sharing.
- Risk avoidance.
- Risk reduction.
Question 9
Which of the following activities most significantly increases the risk that a bank will make poor-quality loans to its customers?
- Borrowers may not sign all required mortgage loan documentation.
- Fees paid by the borrower at the time of the loan may not be deposited in a timely manner.
- The bank's loan documentation may not meet the government's disclosure requirements.
- Loan officers may override the lending criteria established by senior management.
Question 10
The main reason to establish internal controls in an organization is to:
- Encourage compliance with policies and procedures.
- Safeguard the resources of the organization.
- Ensure the accuracy, reliability, and timeliness of information.
- Provide reasonable assurance on the achievement of objectives.