Cost-volume-profit analysis relies on simplifying assumptions. One key assumption is that changes in total costs and revenues are driven by changes in activity volume within the relevant range. Costs are classified as fixed or variable, and their behavior is assumed to remain predictable over the range analyzed. Option B is incorrect because cost and revenue behavior is not assumed to be inverse. Option C is incorrect because when multiple products are sold, CVP analysis usually assumes the sales mix remains constant. Option D is incorrect because both fixed and variable costs must be classified accurately. Internal auditors reviewing budgeting or break-even analysis should verify that CVP assumptions are reasonable and disclosed.
Therefore, Option A is correct.

The market interest rate (yield to maturity, YTM) is calculated using the following formula:
YTM=Coupon Payment+(Face Value#Market PriceYears to Maturity)Face Value+Market Price2YTM = \frac
{\text{Coupon Payment} + \left( \frac{\text{Face Value} - \text{Market Price}}{\text{Years to Maturity}}
\right)}{\frac{\text{Face Value} + \text{Market Price}}{2}}
YTM=2Face Value+Market PriceCoupon Payment+(Years to MaturityFace Value#Market Price) Given:
* Face Value (F) = $250,000
* Coupon Payment (C) = $30,000
* Market Price (P) = $265,000
* Time to Maturity = 1 year
* Calculate the Yield to Maturity (YTM) using the Approximation Formula:
Step-by-Step Calculation:YTM=30,000+(250,000#265,0001)250,000+265,0002YTM = \frac{30,000 + \left(
\frac{250,000 - 265,000}{1} \right)}{\frac{250,000 + 265,000}{2}}YTM=2250,000+265,00030,000+ (1250,000#265,000) YTM=30,000+(#15,000)250,000+265,0002YTM = \frac{30,000 + (-15,000)}{\frac
{250,000 + 265,000}{2}}YTM=2250,000+265,00030,000+(#15,000) YTM=15,000257,500YTM = \frac
{15,000}{257,500}YTM=257,50015,000 YTM=0.0583 or 5.83% (Current Yield)YTM = 0.0583 \text{ or }
5.83\% \text{ (Current Yield)}YTM=0.0583 or 5.83% (Current Yield)
* Convert the YTM to an Annual Percentage Rate:
Since this is a one-year bond, the actual yield to maturity is equivalent to the total return:
Total return=30,000+(#15,000)265,000=15,000265,000\text{Total return} = \frac{30,000 + (-15,000)}
{265,000} = \frac{15,000}{265,000}Total return=265,00030,000+(#15,000)=265,00015,000 YTM=5.66%
+250,000#265,000265,000=12.26%YTM = 5.66\% + \frac{250,000 - 265,000}{265,000} = 12.26\%YTM=5.
66%+265,000250,000#265,000=12.26%
Final Answer:Since 12.26% falls between 12.01% and 12.50%, option (C) is correct.
* IIA GTAG 3: Continuous Auditing - Emphasizes the importance of financial metrics like yield calculations in investment risk assessments.
* COSO ERM Framework - Performance Component - Highlights the significance of market rates in financial decision-making and risk management.
* IFRS 9 - Financial Instruments - Covers bond valuation and interest rate calculations.
IIA References:Conclusion:Since the market interest rate falls between 12.01% and 12.50%, option (C) is the correct answer.

The strongest reason to test an IT contingency plan is to determine whether the test results contribute to improving the continuity and recovery program. A contingency plan cannot guarantee prevention of all significant interruptions; its real purpose is to maintain or restore operations within acceptable recovery objectives after disruption. Testing reveals weaknesses in procedures, roles, communications, backups, recovery sites, and dependencies. Security weaknesses may be identified, but that is not the primary purpose of contingency testing. Following up audit deficiencies is important, but it is separate from the reason for testing the plan. Internal audit should evaluate whether tests are realistic, documented, reviewed, and used to update the plan. Therefore, Option C is correct.

Comprehensive and Detailed In-Depth Explanation:
Physical access controls are security measures designed to prevent unauthorized physical access to tangible IT resources, such as computer hardware, servers, and networking equipment. Examples include locks, security guards, and biometric access systems. In contrast, logical access controls protect access to software and data within the IT system, ensuring that only authorized users can interact with digital resources. These controls include mechanisms like user IDs, passwords, firewalls, and encryption. Option A accurately captures this distinction, whereas the other options either reverse the definitions or misclassify examples of physical and logical controls.

Comprehensive and Detailed In-Depth Explanation:
The development phase of contracting involves drafting, negotiating, and finalizing the contract terms for a business activity. This phase ensures that agreements align with legal and operational requirements before execution.
Option A (Initiation phase) involves identifying needs and planning but does not include drafting contracts.
Option B (Bidding phase) focuses on soliciting and evaluating proposals but does not yet involve contract drafting.
Option D (Management phase) occurs after contracts are finalized and focuses on monitoring performance.
Since the development phase is when contracts are written and finalized, Option C is correct.
Reference: IIA Procurement & Contract Management Framework