A bank uses a risk analysis matrix to quantify the relative risk of auditable entities. The analysis involves rating auditable entities on risk factors using a scale of 1 to 10, with 10 representing the greatest risk. A partial list of risk factors and the ratings given to three of the bank's departments is provided below:
Department Risk Factor A B C Control structure 9 5 7
Nature of assets in department 2 7 9
Dollar value of assets 6 6 8
Complexity of transactions 3 4 8
Which of the following statements regarding risk in the departments is true?
Which of the following is not a standard technique that the chief audit executive (CAE) would use to provide evidence of supervisory review of working papers?
During an audit engagement in an insurance company, an internal auditor discovered that senior management had purposely misclassified $200, 000 in assets on financial statements submitted to regulatory authorities in order to avoid significant statutory penalties. To remain in compliance with the IIA Code of Ethics, what would be the most appropriate action for the auditor to take?
Which of the following would provide the best assessment of an organization's ethical climate?
A major corporation is considering significant organizational changes. Which of the following groups would not be responsible for implementing these changes?