Free IIA-ACCA Exam braindumps download (IIA-ACCA exam dumps Free)

QUESTION: 271

An internal auditor wants to determine whether employees are complying with the information security policy, which prohibits leaving sensitive information on employee desks overnight. The auditor checked a sample of 90 desks and found eight that contained sensitive information. How should this observation be reported, if the organization tolerates 4 percent noncompliance?

The matter does not need to be reported, because the noncompliant findings fall within the acceptable tolerance limit.
The deviations are within the acceptable tolerance limit, so the matter only needs to be reported to the information security manager.
The incidents of noncompliance fall outside the acceptable tolerance limit and require immediate corrective action, as opposed to reporting.
The incidents of noncompliance exceed the tolerance level and should be included in the final engagement report.

Answer(s): D

Show Answer Next Question

QUESTION: 272

Which of the following is the primary reason the chief audit executive should consider the organization's strategic plans when developing the annual audit plan?

Strategic plans reflect the organization's business objectives and overall attitude toward risk.
Strategic plans are helpful to identify major areas of activity, which may direct the allocation of internal audit activity resources.
Strategic plans are likely to show areas of weak financial controls.
The strategic plan is a relatively stable document on which to base audit planning.

Answer(s): A

Show Answer Next Question

QUESTION: 273

An organization has a health and safety division that conducts audits to meet regulatory requirements. The chief health and safety officer reports directly to the CEO.
Which of the following describes an appropriate role for the chief audit executive (CAE) with regard to the organization's health and safety program?

The CAE has no role to play, because the chief health and safety officer reports to a senior executive.
The CAE should coordinate with, and review the work of, the chief health and safety officer to gain an understanding of whether risks related to health and safety are managed properly.
The CAE should give periodic reports directly to the regulator regarding health and safety issues, as it is the appropriate regulatory oversight body.
The CAE should hire an independent external specialist to conduct an annual assessment and provide assurance over the effectiveness of the health and safety program and the reliability of its reports.

Answer(s): B

Show Answer Next Question

QUESTION: 274

Which of the following factors should a chief audit executive consider when determining the audit universe?
1. Components of the organization's strategic plan.
2. Inputs from senior management and the board.

3. Views of competitors and business associates.
4. Results of exit interviews with departing employees.

1 and 2 only
2 and 4 only
1, 2, and 4
2, 3, and 4

Answer(s): A

Show Answer Next Question

QUESTION: 275

Which of the following evaluation criteria would be the most useful to help the chief audit executive determine whether an external service provider possesses the knowledge, skills, and other competencies needed to perform a review?

The financial interest the service provider may have in the organization.
The relationship the service provider may have had with the organization or the activities being reviewed.
Compensation or other incentives that may be applicable to the service provider.
The service provider's experience in the type of work being considered.

Answer(s): D

Show Answer Next Question

Free IIA-ACCA Exam Braindumps ACCA CIA Challenge Exam Questions 271–275 (page: 56)

QUESTION: 271

QUESTION: 272

QUESTION: 273

QUESTION: 274

QUESTION: 275

Free IIA-ACCA Exam Braindumps
ACCA CIA Challenge Exam Questions 271–275 (page: 56)