Senior management has decided to implement the Three Lines of Defense model for risk management. Which of the following best describes senior management's duties with regard to this model?
According to the International Professional Practices Framework, internal auditors who are assessing the adequacy of organizational risk management processes should not:
Which of the following is a primary driver behind the creation and prioritization of new strategic initiatives established by an organization?
A multinational organization allows its employees to access work email via personal smart devices. However, users are required to consent to the installation of mobile device management (MDM) software
that will remotely wipe data in case of theft or other incidents.
Which of the following should the organization ensure in exchange for the employees' consent?
An organization is experiencing a high turnover. Which of the following can human resources deploy to effectively detect the root cause of turnover?
Which of the following statements accurately describes the responsibility of the internal audit activity (IAA) regarding IT governance?
1) The IAA does not have any responsibility because IT governance is the responsibility of the board and senior management of the organization.
2) The IAA must assess whether the IT governance of the organization supports the organization’s strategies and objectives.
3) The IAA may assess whether the IT governance of the organization supports the organization’s strategies and objectives.
4) The IAA may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization’s strategies and objectives.
Which of the following is a major advantage of decentralized organizations, compared to centralized organizations?
Which of me following is applicable to both a job order cost system and a process cost system?
Which of the following statements regarding database management systems is not correct?