Which of the following factors affects the control risk of a company?

Which of the following should be incorporated in a risk management policy?
I. Boundaries and limit structures.
II. Requirements for reporting risk.
III. Risk authorities.

A multinational organization has asked the internal audit activity to assist in setting up the organization's risk management system. The chief audit executive (CAE) agrees to take on the engagement as a consultant. Which of the following tasks is appropriate for the CAE to undertake?

Which of the following would most likley be considered a red flag for fraud?

The chief audit executive (CAE) of a mid-sized pharmaceutical organization has operational responsibility for the regulatory compliance function. The audit committee requests an assessment of regulatory compliance.
According to IIA guidance, which of the following is the CAE's best course of action?