Question 1

Match the privacy principle to the correct 
-Quality
definition.

Accepted Answer

A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical). 
A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical). D

Question 2

Input controls ensure data is processed properly.

Accepted Answer

A) True 
 B)False  False

Question 3

When investigating fraud, ________ enables auditors to extract, analyze, and interpret evidence to detect unusual patterns and irregularities.

Accepted Answer

XBRL

Question 4

Match the privacy principle to the correct 
-Choice and Consent
definition.

Accepted Answer

A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical). 
A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical).

Question 5

Match the privacy principle to the correct 
-Management
definition.

Accepted Answer

A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical). 
A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical).

Question 6

Match the privacy principle to the correct 
-Security for Privacy
definition.

Accepted Answer

A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical). 
A) The entity defines, documents, communicates, and assigns accountability for its privacy policies and procedures. 
B) The entity provides information about its privacy policies and procedures and identifies the purposes for which personal information is collected, used, retained, and disclosed. 
C) The entity limits the use of personal information to the purposes identified in the notice and for which the individual has provided implicit or explicit consent. The entity retains personal information only for as long as necessary to fulfill the stated purposes. 
D) The entity maintains accurate, complete, and relevant personal information for the purposes identified in the notice. 
E) The entity shares personal information to third parties only for the purposes identified in the notice and with the implicit or explicit consent of the individual.
F)The entity monitors compliance with its privacy policies and procedures and has procedures to address privacy-related complaints and disputes.
G)The entity provides individuals their personal information for review and update.
H)The entity collects personal information only for the purposes identified in the notice.
I)The entity describes the choices available to the individual and obtains implicit or explicit consent with respect to the collection, use, and disclosure of personal information.
J)The entity protects personal information against unauthorized access (both physical and logical).

Question 7

Match the internal auditors code of ethics principle to the appropriate definition.
-Objectivity

Accepted Answer

A) Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. 
B) The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 
C) Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 
D) Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services. 
A) Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. 
B) The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 
C) Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 
D) Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services.

Question 8

Which principle in the Code of Ethics for internal auditors states that they are to respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so?

Accepted Answer

A) Confidentiality 
B) Competency 
C) Objectivity 
D) Integrity 
A) Confidentiality 
B) Competency 
C) Objectivity 
D) Integrity

Question 9

What are the three major objectives of an IT audit?

Accepted Answer

1. Confidentiality-to ensure that inform

Question 10

Which Rule of Conduct for internal auditors states that they will not accept anything that may or be presumed to impair their professional judgment.

Accepted Answer

A) Integrity 
B) Competency 
C) Objectivity 
D) Confidentiality 
A) Integrity 
B) Competency 
C) Objectivity 
D) Confidentiality

Question 11

What are the five major categories of internal control?

Accepted Answer

1. Control environment
2. Risk

Question 12

A(n)________, as required by Auditing Standard No. 5, integrates an audit of internal control with an audit of financial statements.

Accepted Answer

The answer of A(n)________, as required by Auditing Standard No....

Question 13

What does Auditing Standard No. 5, an Audit of Internal Control Over Financial Reporting That Is Integrated with an Audit of Financial Statements, require the auditor to understand about IT?

Accepted Answer

It requires the auditor to und

Question 14

You are an internal auditor for a company with a policy stating all software on company computers must be approved and installed by the IT department. During the course of an IT audit you discover an employee has installed MP3s on their company computer. What do you do?

Accepted Answer

Report your findings immediately.
Includ

Question 15

List the three fraud and abuse categories. Provide examples.

Accepted Answer

1. Corruption, such as bribery
2. Misapp

Question 16

Which COSO Internal Control-Integrated Framework essential component of an effective internal control system involves identifying, analyzing, and managing risks that affect a company's ability to record, process, summarize, and report financial data properly?

Accepted Answer

A) Risk Assessment 
B) Control Environment 
C) Control Activities 
D) Monitoring 
A) Risk Assessment 
B) Control Environment 
C) Control Activities 
D) Monitoring

Question 17

Which report provides an opinion regarding fairness of the service organization's description of controls relevant to a company's internal control over financial reporting, but does not test the controls or express an opinion regarding the effectiveness of the controls?

Accepted Answer

A) SOC 1 Type 1 Report 
B) SOC 1 Type 2 Report 
C) SOC 2 Type 1 Report 
D) SOC 2 Type 2 Report 
A) SOC 1 Type 1 Report 
B) SOC 1 Type 2 Report 
C) SOC 2 Type 1 Report 
D) SOC 2 Type 2 Report

Question 18

Which Rule of Conduct for internal auditors states that they are to disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review?

Accepted Answer

A) Objectivity 
B) Integrity 
C) Competency 
D) Confidentiality 
A) Objectivity 
B) Integrity 
C) Competency 
D) Confidentiality

Question 19

What factors are part of the control environment?

Accepted Answer

- integrity and ethical values
- importa

Question 20

Match the internal auditors code of ethics principle to the appropriate definition.
-Confidentiality

Accepted Answer

A) Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. 
B) The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 
C) Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 
D) Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services. 
A) Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. 
B) The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 
C) Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 
D) Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services.

Match the privacy principle to the correct -Quality definition.

Input controls ensure data is processed properly.

When investigating fraud, ________ enables auditors to extract, analyze, and interpret evidence to detect unusual patterns and irregularities.

Match the privacy principle to the correct -Choice and Consent definition.

Match the privacy principle to the correct -Management definition.

Match the privacy principle to the correct -Security for Privacy definition.

Match the internal auditors code of ethics principle to the appropriate definition. -Objectivity

Which principle in the Code of Ethics for internal auditors states that they are to respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so?

What are the three major objectives of an IT audit?

Which Rule of Conduct for internal auditors states that they will not accept anything that may or be presumed to impair their professional judgment.

What are the five major categories of internal control?

A(n)________, as required by Auditing Standard No. 5, integrates an audit of internal control with an audit of financial statements.

What does Auditing Standard No. 5, an Audit of Internal Control Over Financial Reporting That Is Integrated with an Audit of Financial Statements, require the auditor to understand about IT?

You are an internal auditor for a company with a policy stating all software on company computers must be approved and installed by the IT department. During the course of an IT audit you discover an employee has installed MP3s on their company computer. What do you do?

List the three fraud and abuse categories. Provide examples.

Which COSO Internal Control-Integrated Framework essential component of an effective internal control system involves identifying, analyzing, and managing risks that affect a company's ability to record, process, summarize, and report financial data properly?

Which report provides an opinion regarding fairness of the service organization's description of controls relevant to a company's internal control over financial reporting, but does not test the controls or express an opinion regarding the effectiveness of the controls?

Which Rule of Conduct for internal auditors states that they are to disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review?

What factors are part of the control environment?

Match the internal auditors code of ethics principle to the appropriate definition. -Confidentiality

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Cybersecurity

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters

Exam 10: Fraud and Internal Control

Match the privacy principle to the correct -Quality definition.

Input controls ensure data is processed properly.

When investigating fraud, ________ enables auditors to extract, analyze, and interpret evidence to detect unusual patterns and irregularities.

Match the privacy principle to the correct -Choice and Consent definition.

Match the privacy principle to the correct -Management definition.

Match the privacy principle to the correct -Security for Privacy definition.

Match the internal auditors code of ethics principle to the appropriate definition. -Objectivity

Which principle in the Code of Ethics for internal auditors states that they are to respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so?

What are the three major objectives of an IT audit?

Which Rule of Conduct for internal auditors states that they will not accept anything that may or be presumed to impair their professional judgment.

What are the five major categories of internal control?

A(n)________, as required by Auditing Standard No. 5, integrates an audit of internal control with an audit of financial statements.

What does Auditing Standard No. 5, an Audit of Internal Control Over Financial Reporting That Is Integrated with an Audit of Financial Statements, require the auditor to understand about IT?

You are an internal auditor for a company with a policy stating all software on company computers must be approved and installed by the IT department. During the course of an IT audit you discover an employee has installed MP3s on their company computer. What do you do?

List the three fraud and abuse categories. Provide examples.

Which COSO Internal Control-Integrated Framework essential component of an effective internal control system involves identifying, analyzing, and managing risks that affect a company's ability to record, process, summarize, and report financial data properly?

Which report provides an opinion regarding fairness of the service organization's description of controls relevant to a company's internal control over financial reporting, but does not test the controls or express an opinion regarding the effectiveness of the controls?

Which Rule of Conduct for internal auditors states that they are to disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review?

What factors are part of the control environment?

Match the internal auditors code of ethics principle to the appropriate definition. -Confidentiality

Accounting Systems Insights

Accounting Databases

Accounting Interface: Database Forms, Queries, and Reports

Accounting Systems and Business Processes

Business Processes: Purchasing, Sales, and Payroll Cycles

Integrated Enterprise Systems and Cloud Computing

Accounting and Business Intelligence

Accounting and Sustainability Intelligence

XBRL: Intelligent Business Reporting

Cybersecurity

The Risk Intelligent Enterprise: Enterprise Risk Management

Accounting System Development

Database Design: ERD, REA, and SQL

Filters