IIA IIA-CRMA Exam Actual Questions

Management is developing and implementing a risk and control framework for use throughout the organization. Which of the following elements should be included in the organization's control framework?

1. Appropriate levels of authority and responsibility.

2. Supervision of staff and appropriate review of work.

3. The seniority of management in the organization.

4. The ability to trace each transaction to an accountable and responsible individual.

Show Answer Hide Answer

Which of the following documents is most appropriate in promoting the objectivity of the internal audit activity?

Show Answer Hide Answer

Which of the following statements accurately describes the responsibility of the internal audit activity regarding IT governance?

1. The internal audit activity does not have any responsibility because IT governance is the responsibility of the board and senior management of the organization.

2. The internal audit activity must assess whether the IT governance of the organization supports the organization's strategies and objectives.

3. The internal audit activity may assess whether the IT governance of the organization supports the organization's strategies and objectives.

4. The internal audit activity may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization's strategies and objectives.

Show Answer Hide Answer

Which of the following is an example of a risk avoidance strategy?

Show Answer Hide Answer

Which of the following offers the best evidence that the internal audit activity has achieved organizational independence?

Show Answer Hide Answer