Understanding the Margin of Safety Concept:
Margin of Safety (MoS) measures how much sales can drop before the business reaches its break-even point.
It is calculated as: Margin of Safety Sales=Actual Sales#Break-even Sales\text{Margin of Safety Sales} = \text
{Actual Sales} - \text{Break-even Sales}Margin of Safety Sales=Actual Sales#Break-even Sales Applying the Formula:
Selling Price per Shirt: $8
Break-even Sales Volume: 25,000 shirts
Break-even Sales Value: 25,000×8=200,00025,000 \times 8 = 200,00025,000×8=200,000 Actual Sales Revenue: $300,000 Margin of Safety: 300,000#100,000=200,000300,000 - 100,000 = 200,000300,000#100,000=200,000 Why Option B ($200,000) Is Correct?
The margin of safety is the difference between actual and break-even sales.
The correct calculation confirms $200,000 as the margin of safety.
IIA Standard 2120 - Risk Management supports financial risk analysis, including break-even and margin of safety evaluations.
Why Other Options Are Incorrect?
Option A ($100,000): Incorrect subtraction.
Option C ($275,000): Incorrect calculation, not based on break-even sales.
Option D ($500,000): Irrelevant and exceeds actual sales.
The correct margin of safety is $200,000, calculated using standard break-even analysis.
IIA Standard 2120 emphasizes financial risk evaluation in decision-making.
Final Justification:IIA References:
IPPF Standard 2120 - Risk Management (Financial Performance & Cost Analysis) COSO ERM - Financial Stability & Revenue Risk Management Accounting Best Practices - Break-even & Margin of Safety Calculations

Working capital management focuses on short-term assets and liabilities to ensure a business has enough cash and liquid assets to meet its short-term obligations. Effective management of working capital directly impacts liquidity, allowing an organization to maintain operational stability.
Let's analyze each option:
Option A: Liquidity.
Correct.
Liquidity refers to an organization's ability to meet its short-term obligations, such as payroll, supplier payments, and operational expenses.
Working capital management ensures sufficient cash flow and current assets to cover immediate liabilities, making liquidity the primary concern.
IIA Reference: Internal auditors assess financial risk by evaluating liquidity management and cash flow strategies. (IIA Practice Guide: Auditing Liquidity Risk Management) Option B: Profitability.
Incorrect.
While working capital impacts profitability (e.g., through cost control and investment decisions), profitability is more related to revenue and cost management, not just liquidity.
Option C: Solvency.
Incorrect.
Solvency refers to a company's long-term financial stability and its ability to meet debts over time.
Working capital is a short-term financial measure and does not directly determine solvency.
Option D: Efficiency.
Incorrect.
Efficiency relates to resource utilization and operational effectiveness, which are indirectly affected by working capital management but are not its primary focus.
Thus, the verified answer is A. Liquidity.

Data and system backups are a critical part of business continuity and disaster recovery (BC/DR) strategies, ensuring that organizations can restore data and systems to a prior state in the event of system failure, cyberattacks, or disasters.
Primary Purpose of Backup Systems:
The core objective of data and systems backup is to restore data and systems to a previous point in time in case of an unexpected incident.
According to IIA GTAG on Business Continuity Management, backups enable organizations to recover lost, corrupted, or compromised data from an earlier state.
Why Not Other Options?
A). To restore all data and systems immediately after the occurrence of an incident:
This is a misconception because restoration times depend on the Recovery Time Objective (RTO) and the complexity of the incident.
B). To set the maximum allowable downtime to restore systems and data after the occurrence of an incident:
This describes RTO, which is part of business continuity planning but not the primary purpose of backups.
C). To set the point in time to which systems and data must be recovered after the occurrence of an incident:
This describes the Recovery Point Objective (RPO), which determines the acceptable amount of data loss but does not define the main goal of backups.
IIA GTAG - Business Continuity Management
IIA Practice Guide: Auditing Business Continuity and Disaster Recovery
IIA Standard 2120 - Risk Management and IT Controls
Step-by-Step Justification:IIA References:Thus, the correct and verified answer is D. To restore data and systems to a previous point in time after the occurrence of an incident

Two-factor authentication (2FA) enhances security by requiring two different authentication factors from the following categories:
* Something you know (e.g., password, PIN)
* Something you have (e.g., smart card, key fob)
* Something you are (e.g., fingerprint, facial recognition)
The combination of a fingerprint (biometric authentication) and a PIN (knowledge-based authentication) satisfies two-factor authentication requirements.
* A. The user's facial geometry and voice recognition - Incorrect. Both are biometric factors ( something you are), meaning this is single-factor authentication.
* B. The user's password and a separate passphrase - Incorrect. Both are knowledge-based factors ( something you know), making this single-factor authentication.
* C. The user's key fob and a smart card - Incorrect. Both are possession-based factors (something you have), meaning this is not true two-factor authentication.
* D. The user's fingerprint and a personal identification number (PIN) (Correct Answer) - This combines biometric authentication (fingerprint) with knowledge-based authentication (PIN), fulfilling two-factor authentication.
* IIA GTAG 15 - Information Security Governance emphasizes multi-factor authentication as a key security control.
* NIST SP 800-63B - Digital Identity Guidelines defines two-factor authentication as requiring two distinct categories of authentication.
* COBIT 2019 - DSS05 (Managed Security Services) highlights 2FA as a best practice for access control.
Explanation of Each Option:IIA References: