Access control software on an organization's mainframe computer records detailed information concerning both successful and unsuccessful log-on attempts to applications. Which of the following audit tools would be best suited to review the access information that has been recorded?

An audit engagement objective at a manufacturer is to determine the quality of raw materials purchased.
Which of the following actions would best enable an internal auditor to satisfy this objective?

Which of the following would be an appropriate and effective control self-assessment approach in an organization with an authoritative culture?
I . Facilitated meeting
II . Survey
III . Management-produced analysis

In evaluating the validity of different types of audit evidence, which of the following conclusions is not correct?

An internal auditor is assessing the organization's risk management framework. Which of the following formulas should he use to calculate the residual risk?