Free CIA Exam Braindumps
Certified Internal Auditor Exam Questions 391–395 (page: 80)

During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?

I). Implement a test environment to ensure that testing is not performed in the production environment.
II). Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.
III). Eliminate access by developers to the production environment.

Which of the following types of internal audit consulting engagements is an example of a facilitation service?

I). Conducting control self assessment workshops.
II). Participating on standing committees.
III). Reviewing regulatory compliance.
IV). Benchmarking.
V). Estimating savings from outsourcing processes.

Which of the following are typical steps in the design of an organization's performance measurement system?

An audit identified a number of weaknesses in the configuration of a critical client/server system. Although some of the weaknesses were corrected prior to the issuance of the audit report, correction of the rest will require between six and 18 months for completion.
Consequently, management has developed a detailed action plan, with anticipated completion dates, for addressing the weaknesses. Which of the following is the most appropriate course of action for the chief audit executive to take?

When conducting audit followup of a finding related to cash management routines, an internal auditor would expect to find that all of the following changes have occurred except