A chief audit executive (CAE) is obtaining information required by a regulatory oversight body and discovers a situation that requires management to take immediate corrective action. What is the best course of action for the CAE to take?
Which of the following audit findings would have the least impact (either positive or negative) on a department's control environment?
A manufacturing organization's multi-step sales and shipping process starts when the organization's headquarters receives the sales order. Headquarters then shares that data with the individual manufacturing facility that compiles the shipment. Finally, the individual manufacturing facility sends the shipments to the customer. Which method should the internal auditor use to document this process in a flowchart?
Which of the following actions does not violate the IIA Code of Ethics or Standards?
An internal auditor is conducting an assessment of the organization's fraud prevention program using the COSO enterprise risk management framework. According to this framework, which of the following activities would fall under the control environment component for preventing fraud?
1. The organization uses an automated authority approval matrix to control payments.
2. The organization has a whistleblower hotline that is available to employees.
3. Annually, every manager completes a comprehensive fraud assessment of his or her department.
4. Annually, the organization reviews and communicates the code of expected behavior.