MultipleChoice
As a result of a recent discovery of false information on employment applications, an internal auditor has reviewed hiring procedures. Which of the following represents a weakness in the control system?
I . Applicants are not required to have their signed applications legally authenticated.
II . Applicants' educational information is not validated with the educational institution before employment is offered.
III . Information related to applicants' long-term work history is not validated before employment is offered.
OptionsMultipleChoice
After issuance of the engagement final communication for an audit of an organization's accounts payable function, which of the following should be sent satisfaction surveys?
I . Manager of disbursements.
II . Controller.
III . Chief operating officer.
IV . Audit committee members.
OptionsMultipleChoice
In a client satisfaction survey for an internal audit engagement, client management should be asked to assess which of the following factors?
I . Audit team's knowledge of the audited area.
II . Usefulness of the audit results.
III . Quality of management of the internal audit activity.
IV . Clarity of the scope and objectives of the audit engagement.
OptionsMultipleChoice
An audit of a Web-based third-party payment processor determined that a programming error enabled customers to create multiple accounts for each mailing address. This caused problems during the processing of credit card transactions. Management agreed to correct the program and notify customers with multiple accounts that the accounts would be consolidated. What should the auditor do in response?
I . Amend the scope of the subsequent audit to verify that the program was corrected and that accounts were consolidated.
II . Evaluate the adequacy and effectiveness of the corrective action proposed by management.
III . Schedule a follow-up review to verify that the program was corrected and the accounts were consolidated.
IV . Do nothing because management has agreed to address the problem.
OptionsMultipleChoice
Which of the following types of internal audit consulting engagements is an example of a facilitation service?
I . Conducting control self-assessment workshops.
II . Participating on standing committees.
III . Reviewing regulatory compliance.
IV . Benchmarking.
V . Estimating savings from outsourcing processes.
OptionsMultipleChoice
Which of the following activities would be performed during a benchmarking consulting engagement?
I . Collect data relevant to the benchmarking process.
II . Review all business processes.
III . Define critical success factors.
IV . Identify performance gaps.
OptionsMultipleChoice
Which of the following tests must an internal auditor perform in order to ensure that inbound electronic data interchange (EDI) transactions are received and translated accurately?
I . Computerized tests to assess transaction reasonableness and validity.
II . Review of log books to ensure that transactions are logged upon receipt.
III . Edit checks to identify unusual transactions.
IV . Verification of limitations on the authority of users to initiate specific EDI transactions.
OptionsMultipleChoice
In a review of an electronic data interchange application using a third-party service provider, the auditor should:
I . Ensure encryption keys meet International Organization for Standardization (ISO) standards.
II . Determine whether an independent review of the service provider's operation has been conducted.
III . Verify that only public-switched data networks are used by the service provider.
IV . Verify that the service provider's contracts include necessary clauses, such as the right to audit.
Options