During an audit engagement, the internal auditor discussed a risk mitigation recommendation with the manager of the area under review. The manager disagreed with the risk assessment and recommendation. The two failed to come up with an alternative solution, and the auditor decided to proceed with including the original recommendation in the engagement report. Which of the following is especially important in dealing with this type of situation?

Which of the following controls could an internal auditor reasonably conclude is effective by observing the physical controls of a large server room?

According to The IIA's Code of Ethics, which of the following actions violates the principle of confidentiality?

According to the COSO internal control framework, which of the following best describes the use of continuous auditing programs by the internal audit activity?

Which of the following is an appropriate responsibility for the internal audit activity with regard to the organization's risk management program?