Which filter can be used to identify expense reports that contain suspicious expense type combinations, such as, a report for a single trip that contains taxi, car rental, and mileage expenses?
A. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "Equals" condition for values that include taxi, car, mileage.
B. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.
C. Inclusive function filter grouped by the "Expense Report Information" object's "Person" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.
D. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.
E. Inclusive function filter grouped by the "Expense Report Information" object's "Person" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.
The internal auditor advised the Control Owner of North America to perform assessment for two P2P
controls.
Which three steps can the Control Owner perform to kick-off assessments for only those two controls?
(Choose three.)
A. Initiate a planned assessment that includes all controls assigned to perspective P2P.
B. Perform impromptu assessments for the two controls.
C. Enable impromptu assessments during configuration of module objects.
D. Initiate a planned assessment and include the two controls as part of the same assessment.
E. Initiate two planned assessments, one for each control.
Your client has configured separate roles for control assessor and control assessment reviewer. The control assessor has submitted his or her assessment. The control assessor realizes later that he or she has forgotten to attach a critical test evidence document to the assessment and needs to attach it now. How can this be accomplished?
A. The assessor can request the reviewer to attach the document during the review.
B. On the Assessment tab in the Control definition, the assessor can select the assessment and click the Complete Assessment button. He or she can attach the document and resubmit the assessment.
C. The assessor can request the reviewer to reject the assessment. After the assessment is rejected, the assessor can then attach the document and resubmit the assessment.
D. On the Manage Assessments page, the assessor can select the assessment and click the Reopen button. He or she can then attach the document and resubmit the assessment.
An organization has a list of companies with which they no longer wish to do business. The list is not
stored in their ERP Could but is stored in a file.
Which transaction model will identify payments made to these companies?
A. Create an Imported business object that can be used in conjunction with Oracle's pre-built "Payment" object. One both objects are in your model, add this standard filter: the "Payment" object's "Remit to Supplier Name" is similar to the custom object's "Company Name" by 95%.
B. Add a configurable attribute "Company Name" to Oracle's pre-built "Payment" object. Then add this standard filter: "Remit to Supplier Name" equals "Company Name".
C. You cannot define this model because imported objects from a file cannot be used with delivered objects.
D. Create an Imported business object that can be used in conjunction with Oracle's pre-built "Payables Invoice" object. Once both objects are in your model, add this standard filter: the "Payables Invoice" object's "Supplier Name" equals the custom object's "Company Name".
Your client has three operating units.
What are two ways in which you can exclude an operating unit where there are not enough personnel to
allow segregation of duties? (Choose two.)
A. In a model, create a new condition logic filter, select the operating unit attribute, select the operating unit value, and then perform an exclusion though the advanced options check box.
B. Navigate to the Create Access Global Condition page and create a new condition logic filter, select the operating unit attribute, select the operating unit value, and then perform an exclusion though the advanced options check box.
C. Navigate to the Create Access Global Condition page and create a new condition logic filter, select the within same operating unit attribute, select the value yes, and then perform your exclusion though the advanced options check box.
D. In a model, create a new condition logic filter, select the within same operating unit attribute, select the value yes, and then perform your exclusion though the advanced options check box.
E. In a model, create a new condition logic filter, select the operating unit attribute and select the operating unit value.
During implementation, you created a risk object and successfully mapped it to a control object. The
client's Risk Owner is able to access the risk but not the control.
Why did this happen?
A. The Risk Administrator needs to run the synchronize jobs to populate the mapping.
B. The Risk Owner account is inactive.
C. The Risk Owner role does not have the right privileges.
D. The risk and control objects are inactive and need to be made active.
You want to identify Controls with the most Incidents, with the condition that the identified Controls should
have 80% of all Incidents. To do this, you have imported a custom object that contains the number of
incidents associated with each control, and have added that object to a transaction model.
Which pattern filter must you now apply?
A. Anomaly Detection
B. Mean
C. Pareto
D. Absolute Deviation
E. Clustering
During implementation, you created a Financial Reporting Compliance superuser and assigned this user
the following roles:
Enterprise Risk and Control Manager
IT Security Manager
Employee
The superuser logs in to Financial Reporting Compliance but is not able to create new Data Security
Policies.
What is wrong?
A. The superuser's account is inactive and his or her account needs to be activated.
B. The application will not allow a user to both create users and assign them roles.
C. The superuser's account is created but the synchronization jobs have not been run.
D. The superuser's account is not yet approved by his or her supervisor in Financial Reporting Compliance.
You can relate objects in Financial Reporting Compliance. Which statement is true about editing or creating related objects in the Related Objects section on the Risk Definition page?
A. You can relate only process objects.
B. You can relate a new process and a new control.
C. You can relate only control objects.
D. You can relate only an existing control, but not a new control.
Your customer needs to conduct monthly Operational Effectiveness assessments for controls across two organizations (North America and EMEA). Your customer requires that assessment results for North America be accessible only to users in North America and likewise for EMEA. Additionally, the Chief Risk Officer reviews the assessment results by Business Process every week. How should you design perspectives to achieve this?
A. Use the Region hierarchy for security and the Business Process hierarchy for reporting of controls.
B. Use the Region hierarchy initially, and later use both Region and Business Process hierarchies for security.
C. Use both Region and Business Process hierarchies solely for reporting purposes.
D. Use the Business Process hierarchy for security and the Region hierarchy for reporting of controls.