To furnish useful and timely information and promote improvements in operations, internal auditors should provide:
An internal auditor recommended that an organization implement computerized controls in its sales system in order to prevent sales representatives from executing contracts in excess of their delegated authority levels. A follow-up review found that the sales system had not been modified, but a process had been implemented to obtain written approval by the vice president of sales for all contracts in excess of $1 million. The chief audit executive (CAE) would be justified in reporting this situation to the organization's board if:I. In the opinion of the CAE, the level of residual risk assumed by senior management is too high.II. Testing of compliance with the new process finds that all new contracts in excess of $1 million have been approved by the vice president of sales.III. The cost of modifying the sales system to include a preventive control is less than $100,000.
Which of the following factors would not be considered in determining appropriate follow-up procedures?
An internal auditor determines that certain information from the engagement results is not appropriate for disclosure to all report recipients because it is privileged.In this situation, which of the following actions would be most appropriate?
According to IIA guidance, which of the following actions might place the independence of the internal audit function in jeopardy?
Which of the following data collection strategies systematically tests the effects of various factors on an outcome?
