According to IIA guidance, which of the following statements are true regarding the internal audit plan?
1. The audit plan is based on an assessment of risks to the organization.
2. The audit plan is designed to determine the effectiveness of the organization's risk management process.
3. The audit plan is developed by senior management of the organization.
4. The audit plan is aligned with the organization's goals.

The critical path for any project is the path that exhibits which of the following characteristics?

Which of the following authentication controls combines what a user knows with the unique characteristics of the user respectively?

An organization is considering the outsourcing of its business processes related to payroll and information technology functions. Which of the following is the most significant area of concern for management regarding this proposed agreement?

According to IIA guidance, which of the following would be the best first step to manage risk when a third party is overseeing the organization's network and data?