IIA IIA-CIA-PART3-3P Exam Questions & Answers

In creating a risk-based plan, which of the following best describes a top-down approach to understanding business processes?

A. Identifying the processes at the activity level.

B. Analyzing the organization's strategic plan where the business processes are defined.

C. Analyzing the organization's objectives and identifying the processes needed to achieve the objectives.

D. Identifying the risks affecting the organization, the objectives, and then the processes concerned.

The internal audit activity completed an initial risk analysis of the organization's data storage center and found several areas of concern. Which of the following is the most appropriate next step?

A. Risk response.

B. Risk identification.

C. Identification of context.

D. Risk assessment.

Organizations mat adopt just-in-time purchasing systems often experience which of the following?

A. A slight increase in carrying costs.

B. A greater need for inspection of goods as the goods arrive.

C. A greater need for linkage with a vendor s computerized order entry system.

D. An increase in the number of suitable suppliers