During which phase of disaster recovery planning should an organization identify the business units, assets, and systems that are critical to continuing an acceptable level of operations?
An organization has received funding to continue a program that utilizes an in-house Due to new legislative requirements the application will require additional features to capture information not previously collected Which of the following is the most critical for completing this specific project?
The leadership of an organization encourages employees to form voluntary problem-solving groups whereby several employees from the same work area meet regularity during work hours to discuss improvements and creative ways to reduce costs. Which of the following best describes this approach?
According to IIA guidance, which of the following best describes the activities that occur during the conversion phase of an IT project?
Which of the following statements about market signaling is correct?
1) The organization releases information about a new product generation.
2) The organization limits a challenger's access to the best source of raw materials or labor.
3) The organization announces that it is fighting a new process technology.
4) The organization makes exclusive arrangements with the channels.
According to IIA guidance, which of the following would be a primary reason for an internal auditor to test the organization's IT contingency plan?
A chief audit executive wants to implement an enterprisewide resource planning software.
Which of the following internal audit assessments could provide overall assurance on the likelihood of the software implementation's success?
According to IIA guidance, which of the following corporate social responsibility (CSR) evaluation activities may be performed by the internal audit activity?
1) Consult on CSR program design and implementation.
2) Serve as an advisor on CSR governance and risk management.
3) Review third parties for contractual compliance with CSR terms.
4) Identify and mitigate risks to help meet the CSR program objectives.
Which of the following network types should an organization choose if it wants to allow access only to its own personnel?