Activity-Based Costing (ABC) is a cost allocation method that assigns overhead costs based on activities that drive costs rather than using a single volume-based measure like labor hours or machine hours. It provides a more accurate allocation of indirect costs to products or services.
ABC Costing and Its Flexibility (Correct Answer: C)
ABC can be applied to both job order costing (which tracks costs for individual products or projects) and process costing (which tracks costs across continuous production processes).
IIA Standard 2120 - Risk Management suggests that internal auditors evaluate whether cost allocation methodologies align with business objectives and financial accuracy.
ABC improves cost accuracy by assigning overhead to specific activities, making it useful in different costing systems.
Why the Other Options Are Incorrect:
A). " ABC is similar to conventional costing in how it treats overhead allocation. " (Incorrect) Traditional costing allocates overhead based on a single cost driver, such as direct labor or machine hours.
ABC allocates overhead based on multiple activity drivers, making it more precise.
B). " ABC uses a single unit-level basis to allocate overhead. " (Incorrect) ABC does not rely on a single unit-level measure.
Instead, it uses multiple cost drivers at different levels (unit-level, batch-level, product-level, and facility- level).
D). " The primary disadvantage of ABC is less accurate product costing. " (Incorrect) ABC is actually more accurate than traditional costing in assigning overhead costs.
The primary disadvantages of ABC are its complexity and cost of implementation, not reduced accuracy.
IIA Standard 2120 - Risk Management (Assessing the appropriateness of costing methodologies) IIA Standard 2130 - Compliance (Ensuring financial management practices align with standards) IIA Standard 2210 - Engagement Objectives (Evaluating financial controls and cost allocation methods) Step-by-Step Justification:IIA References for This Answer:Thus, the best answer is C. An ABC costing system may be used with either a job order or a process cost accounting system, as ABC is flexible and can be applied in both costing environments.

Analytical procedures involve evaluating financial and operational data by examining plausible relationships between numbers, trends, and industry benchmarks. These procedures assume that data relationships exist and will continue unless there is evidence to the contrary.
(A) Data relationships are assumed to exist and to continue where no known conflicting conditions exist. # Correct. Analytical procedures rely on historical trends and logical relationships between data (e.g., revenue vs. expenses, payroll vs. employee count). If no unusual variations or red flags are observed, auditors assume continuity.
IIA GTAG "Auditing Business Intelligence" supports the assumption that data relationships persist unless evidence suggests otherwise.
(B) Analytical procedures are intended primarily to ensure the accuracy of the information being examined.
Incorrect. The primary goal of analytical procedures is not absolute accuracy but rather identifying trends, anomalies, and risks that require further investigation.
(C) Data relationships cannot include comparisons between operational and statistical data.
Incorrect. Operational and statistical data are commonly used in analytical procedures (e.g., comparing production output with raw material consumption, or customer transactions with website visits).
IIA GTAG "Data Analytics: Elevating Internal Audit Performance" highlights the importance of using both financial and operational data in analytical testing.
(D) Analytical procedures can be used to identify unexpected differences, but cannot be used to identify the absence of differences.
Incorrect. Analytical procedures can identify both unexpected variances and expected consistency. Auditors analyze trends, seasonal fluctuations, and relationships, detecting both errors and missing anomalies.
IIA GTAG - "Auditing Business Intelligence"
IIA GTAG - "Data Analytics: Elevating Internal Audit Performance"
IIA Standard 2320 - Analysis and Evaluation
Analysis of Answer Choices:IIA References:Thus, the correct answer is A, as analytical procedures assume data relationships exist and continue unless conflicting conditions arise.

The question asks specifically about an authentication policy requirement. The strongest authentication option listed is a passcode followed by a verification response, because this represents multi-factor or two-step authentication. It requires more than a single device passcode and reduces the risk that a stolen or compromised device can access organizational data. A VPN protects communications but is not itself the best authentication requirement. An eight-digit passcode or complicated swipe pattern is only a single authentication factor. Remote wipe and encryption are important mobile security controls, but they are not authentication requirements. Internal auditors reviewing BYOD should distinguish authentication, encryption, remote wipe, device management, and network security. For authentication, Option D is correct.

In a cost equation, the independent variable is the activity driver that explains or influences the dependent variable. Here, maintenance cost changes as patient days change. Therefore, patient days are the independent variable, and total maintenance cost is the dependent variable. Fixed cost and variable cost are components of the cost equation, not the independent variable itself. For example, a cost equation may be expressed as total maintenance cost = fixed cost + variable cost per patient day × patient days. Internal auditors reviewing cost behavior should identify the correct cost driver before evaluating budgets, forecasts, variance analysis, or cost allocation. Since patient days drive maintenance cost in the data provided, Option D is correct.

A web browser is the software application that interprets hypertext markup language (HTML), displays web pages, and allows users to access remote web content. Browsers also process related technologies such as scripts, style sheets, cookies, and encrypted web sessions. TCP/IP is a communications protocol suite used to transmit data across networks; it is not the software used to display web pages. An operating system manages hardware and software resources on a device but does not itself translate HTML for normal user browsing. A web server hosts and delivers web pages to users but does not serve as the end-user viewing software. Internal auditors reviewing web applications should distinguish between client-side browsers, servers, protocols, and application controls. Therefore, Option C is correct.