Free CIA Exam Braindumps
Certified Internal Auditor Exam Questions 91–95 (page: 20)

Which of the following should an internal audit activity take into consideration when evaluating an organization's privacy framework?

I). Types of information gathered by the organization.
II). Methods used to collect and store information.
III). Location and custody of key information.
IV). Intended use of information that is collected and stored.

In addition to risk materiality, which of the following should be considered during the process of ranking and validating an organization's risk priorities?

According to the International Professional Practices Framework, which of the following criteria should be used to evaluate an organization's governance process?

An annual audit plan would be the primary method of identifying the internal audit activity's

An organization's decision to outsource its computer systems support is an example of which of the following risk responses?