Which of the following statements accurately describes the responsibility of the internal audit activity regarding IT governance?
1. The internal audit activity does not have any responsibility because IT governance is the responsibility of the board and senior management of the organization.
2. The internal audit activity must assess whether the IT governance of the organization supports the organization's strategies and objectives.
3. The internal audit activity may assess whether the IT governance of the organization supports the organization's strategies and objectives.
4. The internal audit activity may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization's strategies and objectives.

Which of the following is the responsibility of an internal auditor?
1. Assist operating management in implementing audit recommendations.
2. Provide management with value-added analysis to improve operations.
3. Become an advocate for changes to the internal audit activity charter.
4. Disclose non-financial risks that may be identified during the course of an engagement.

Which of the following is not an advantage of face-to-face interviews over electronic surveys?

Which of the following internal controls best mitigates the risk of corruption schemes between employees and vendors?

Which of the following indicates that internal audit independence may be compromised?