An Assessment should target very low or zero Assurance Risk

• A.True. That's the only sensible approach.
• B.False. Assessment Purpose and Parameters will drive what Assurance Risk to target.

Comment: *

Name: *

Email: *

Verification: *

Follow-up on the implementation status of the recommendation from within the area being assessed is known as:

• A.Follow-Up by Process Owner
• B.Follow-Up by Independent Assurance
• C.Follow-Up by Targeted Review

Comment: *

Name: *

Email: *

Verification: *

The two kinds of PROACTIVE controls are

• A.training and education
• B.promoting and preventive
• C.access and system

Comment: *

Name: *

Email: *

Verification: *

Identifying root causes helps to

• A.Be more specific regarding who is to blame
• B.Find a solution to fixing not only this problem but potential other problems that result from the same root cause

Comment: *

Name: *

Email: *

Verification: *

A QUALIFIED assurance opinion or statement is

• A.An affirmative statement that subject matter conforms to the suitable criteria and is free from meaningful misunderstanding
• B.A statement that the assessment didn't observe anything that makes us doubt whether subject matter conforms to the suitable criteria and is free from meaningful misunderstanding.
• C.A statement that the assessment encountered some limitations in what can be concluded and outside of those limitations a positive or negative statement can be offered.

Comment: *

Name: *

Email: *

Verification: *