A cold site is a disaster recovery option that provides only basic infrastructure (such as power, space, and network connectivity) but does not have pre-installed IT equipment such as servers and storage. Organizations must procure and install servers and restore data before resuming operations, leading to longer recovery times.
Let's analyze each option:
Option A: Data is synchronized in real-time
Incorrect.
Real-time data synchronization is a feature of hot sites, which have fully operational infrastructure and data replication.
Cold sites do not support real-time synchronization because they lack servers and storage.
Option B: Recovery time is expected to be less than one week
Incorrect.
Cold sites require significant setup time since servers and infrastructure must be procured, configured, and installed.
Recovery time can often exceed one week, depending on the complexity of IT systems.
Option C: Servers are not available and need to be procured
Correct.
A cold site lacks computing hardware (e.g., servers, storage, network devices), meaning the organization must purchase or transport servers to the site before recovery can begin.
IIA Reference: Internal auditors assess disaster recovery strategies, including the limitations of cold sites and their impact on business continuity. (IIA GTAG: Auditing Business Continuity and Disaster Recovery) Option D: Recovery resources and data restore processes have not been defined.
Incorrect.
Even though a cold site lacks IT infrastructure, the organization still has a disaster recovery plan, which includes predefined recovery steps, resource planning, and data restoration procedures.
Thus, the verified answer is C. Servers are not available and need to be procured.

The CAE must communicate the results of the QAIP to the board and senior management. This includes results from ongoing monitoring, periodic self-assessments, and external assessments.
Option A (board oversight) is part of governance but not a QAIP requirement. Option B is incorrect because conformance is assessed for the activity overall, not per engagement. Option C is incorrect because self- assessments are ongoing, while external assessments are required at least once every five years.
Thus, the essential QAIP requirement for conformance is reporting results to the board (Option D).
Reference:
IIA Standards - Standard 1320: Reporting on the Quality Assurance and Improvement Program.

When disagreements occur regarding risk management or audit findings, the CAE should first escalate the matter within management levels to attempt resolution. Only if the disagreement remains unresolved after discussion with senior management should the CAE report the matter to the board or audit committee.
Options B and C are premature: the charter does not grant internal audit supremacy over management's decisions, and documenting disagreement in the audit report should occur only after reasonable attempts at resolution. Option A (escalating immediately to the board) should occur only if discussion with management does not resolve the issue.
Reference:
IIA Standards - Standard 2600: Communicating the Acceptance of Risks.

Comprehensive and Detailed In-Depth Explanation:
A favorable labor efficiency variance (Option 1) occurs because experienced workers complete tasks more efficiently, reducing time and waste.
An adverse labor rate variance (Option 2) arises because hiring experienced employees increases labor costs compared to budgeted rates.
Option 3 (Adverse labor efficiency variance) is incorrect because skilled workers typically improve efficiency.
Option 4 (Favorable labor rate variance) is incorrect because higher wages increase costs, leading to an adverse variance.
Thus, the correct answer is A (1 and 2 only).
Reference: IIA Financial Management - Variance Analysis in Cost Accounting

Herzberg's Two-Factor Theory of Motivation identifies two categories of workplace factors:
Hygiene Factors - Prevent dissatisfaction but do not create motivation (e.g., salary, job security, work conditions).
Motivational Factors - Lead to job satisfaction and motivation (e.g., achievement, responsibility, advancement, recognition).
(A) Salary and status. # Incorrect.
Salary is a hygiene factor, meaning it prevents dissatisfaction but does not directly drive job satisfaction.
Status is also not a strong motivator under Herzberg's theory.
(B) Responsibility and advancement. # Correct.
These are motivational factors in Herzberg's theory.
Employees feel satisfied when they have responsibility, career growth, and promotion opportunities.
IIA GTAG "Auditing Human Resource Management" highlights career development as a key driver of employee motivation and retention.
(C) Work conditions and security. # Incorrect.
These are hygiene factors, which help avoid dissatisfaction but do not actively motivate employees.
(D) Peer relationships and personal life. # Incorrect.
Good relationships with coworkers help, but they are not primary motivators under Herzberg's theory.
IIA GTAG - "Auditing Human Resource Management"
IIA Standard 2110 - Governance (Employee Motivation & Engagement)
Herzberg's Two-Factor Theory of Motivation (Workplace Psychology Research) Analysis of Answer Choices:IIA References:Thus, the correct answer is B, as responsibility and advancement are the key motivational factors leading to employee satisfaction.