Free CIA Exam Braindumps
Certified Internal Auditor Exam Questions 451–455 (page: 92)

Which of the following items should be addressed in an organization's privacy statement?

I). Intended use of collected information.
II). Data storage and security.
III). Network/infrastructure authentication controls
IV). Data retention policy of the organization.
V). Parties authorized to access information.

During an audit of a branch bank, an internal auditor learned that a series of system failures had resulted in a four day delay in processing customers' scheduled payroll direct deposits. The first failure was that of a disk drive, followed by software and other minor failures. Which of the following controls should the auditor recommend to avoid similar delays in processing?

An auditor analyzed a payroll system's data files for unusual activity, such as excessive overtime hours, unusual fluctuations in pay rates, and excessive vacation time. The application controls being verified by this analysis are

When internal auditors provide consulting services, the scope of the engagement is primarily determined by

While investigating a compromised Web server, an auditor found that the Web server logs had been deleted. The auditor should recommend that the Web server logs be