IIA Exam IIA-CRMA Topic 1 Question 16 Discussion

Actual exam question for IIA's IIA-CRMA exam

Question #: 16
Topic #: 1

Given the highly technical and legal nature of privacy issues, which of the following statements best describes the internal audit activity's responsibility with regard to assessing an organization's privacy framework?

AIf an organization does not have a mature privacy framework, the internal audit activity should assist in developing and implementing an appropriate privacy framework.

BBecause the audit committee is ultimately responsible for ensuring that appropriate control processes are in place to mitigate risks associated with personal information, the internal audit activity is C. required to conduct privacy assessments.

DThe internal audit activity may delegate to nonaudit IT specialists the responsibility of determining whether personal information has been secured adequately and data protection controls are sufficient.

DThe internal audit activity should have appropriate knowledge and competence to conduct an asses .......framework.

Show Suggested Answer

Suggested Answer: D, D

by Karan at May 06, 2022, 07:31 PM

Limited Time Offer

25%

Off

Get Premium IIA-CRMA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!