A retained earnings policy determines how much of a company's net income is retained (kept in the business) versus distributed to shareholders as dividends.
* (A) Cash.
* Incorrect: While retained earnings affect the company's financial position, they do not directly impact cash flow, as retained earnings can be reinvested in non-cash assets.
* (B) Dividends. (Correct Answer)
* A retained earnings policy directly influences dividend payouts.
* More retained earnings = lower dividends; less retained earnings = higher dividends.
* IIA Standard 2110 (Governance) requires oversight of dividend policies as part of corporate governance.
* COSO ERM - Risk Response suggests that dividend policies should align with strategic financial goals.
* (C) Gross margin.
* Incorrect: Gross margin is determined by revenue and cost of goods sold (COGS), not retained earnings.
* (D) Net income.
* Incorrect: Net income is calculated before retained earnings are determined, so the policy does not influence net income directly.
* IIA Standard 2110 - Governance: Covers policies impacting financial distributions.
* COSO ERM - Risk Response: Suggests that retained earnings policies influence financial stability and investor decisions.
Analysis of Each Option:IIA References Supporting the Answer:Thus, the correct answer is (B) because a retained earnings policy primarily affects the amount of dividends paid to shareholders.

A physical control is a security measure designed to protect assets, facilities, and personnel from physical threats such as fire, theft, or unauthorized access. Fire detection and suppression equipment (e.g., fire alarms, sprinklers, extinguishers) directly protects physical assets, making it a clear example of a physical control.
(A) Providing fire detection and suppression equipment. #
Correct. This is a direct physical security control that helps mitigate fire risks by detecting and suppressing fires.
IIA GTAG " Physical Security and IT Asset Protection " identifies fire detection as an essential physical security measure.
(B) Establishing a physical security policy and promoting it throughout the organization. # Incorrect. A policy is an administrative control, not a physical control. While important, it does not provide direct physical protection.
(C) Performing business continuity and disaster recovery planning. #
Incorrect. This is a procedural control, not a physical one. Planning for disasters does not physically secure assets but instead prepares an organization for recovery.
(D) Keeping an offsite backup of the organization ' s critical data. #
Incorrect. This is an IT security control, ensuring data availability rather than physically protecting assets.
IIA GTAG - " Physical Security and IT Asset Protection "
IIA Standard 2110 - Governance (Risk Management Controls)
COBIT Framework - Physical and Environmental Security Controls
Analysis of Answer Choices:IIA References:Thus, the correct answer is A, as fire detection and suppression equipment provides direct physical protection against fire-related risks.

To maximize profit with a limited material supply of 500 kg per month, the company should prioritize producing the product that generates the highest contribution margin per kg of material used.
Step 1: Calculate Contribution Margin Per Unit for Each ProductSince fixed costs are not relevant in this decision, we focus on the contribution margin per unit of raw material:
Selling price per unit = $10
Material cost per unit = 2 kg × $1/kg = $2
Contribution margin per unit = $10 - $2 = $8
Contribution margin per kg = $8 ÷ 2 kg = $4 per kg
Selling price per unit = $13
Material cost per unit = 6 kg × $1/kg = $6
Contribution margin per unit = $13 - $6 = $7
Contribution margin per kg = $7 ÷ 6 kg = $1.17 per kg
Product X ($4 per kg) is more profitable per kg than Product Y ($1.17 per kg).
To maximize profit, produce as many units of Product X as possible first, then allocate the remaining material to Product Y.
First, maximize production of Product X
Each unit of Product X requires 2 kg.
Maximum units of Product X = 500 kg ÷ 2 kg per unit = 250 units.
However, demand is only 70 units, so produce 70 units of Product X.
Material used for 70 units of X = 70 × 2 kg = 140 kg.
Material remaining = 500 kg - 140 kg = 360 kg.
Use remaining material for Product Y
Each unit of Product Y requires 6 kg.
Maximum units of Product Y = 360 kg ÷ 6 kg per unit = 60 units.
Produce 70 units of Product X (to meet demand).
Produce 60 units of Product Y (using the remaining material).
IIA GTAG 13: Business Performance Management - Discusses maximizing profit by prioritizing high contribution margin products.
IIA Practice Guide: Cost Analysis for Decision-Making - Covers constraints and resource allocation for maximizing profitability.
Product XProduct YStep 2: Prioritize Product with Higher Contribution Margin Per KgStep 3: Allocate Limited Material (500 kg)Final Decision:IIA References for Validation:Thus, B (60 units) is the correct answer because it optimally allocates the 500 kg of material to maximize profit.

A data dictionary describes the content, meaning, structure, format, relationships, and attributes of data stored in a database. It defines items such as field names, data types, valid values, table relationships, and business definitions. This helps ensure consistency, data quality, system understanding, and proper use of information.
System tables and program files are technical database components, but they are not the core description of a data dictionary. Users, permissions, and groups are access-control objects, not the primary purpose of a data dictionary. Backup and encryption keys are security and recovery elements. Internal auditors may use a data dictionary to understand data sources, validate analytics fields, and assess data governance. Therefore, Option B is correct.

Understanding Matrix Organizations:
A matrix organization is a hybrid structure that combines functional and project-based structures, where employees report to multiple managers (e.g., a functional manager and a project manager).
These organizations adapt to projects by adjusting authority, responsibility, and accountability based on the project's stage or the organization's culture.
Why Option C Is Correct?
In a matrix organization, roles and decision-making authority evolve based on the project's phase, size, or complexity.
Employees might report to different managers at different times, and accountability structures may change.
This aligns with IIA Standard 2110 - Governance, which emphasizes clear roles and responsibilities in dynamic organizational structures.
Why Other Options Are Incorrect?
Option A (Unity-of-command concept):
The unity-of-command principle states that employees should report to only one superior, which contradicts the nature of a matrix organization, where dual reporting exists.
Option B (Combination of product and functional departments allows management to utilize personnel from various functions):
While matrix organizations integrate product and functional departments, the key defining feature is the variable authority, responsibility, and accountability, making option C a better fit.
Option D (Best suited for firms with scattered locations or large-scale firms):
While matrix structures can be used in large firms, they are not limited to them and are often found in project- based industries (e.g., engineering, IT, consulting).
Matrix organizations adapt their authority structures based on project needs, making option C the best choice.
IIA Standard 2110 supports governance structures that evolve with organizational needs.
Final Justification:IIA References:
IPPF Standard 2110 - Governance (Organizational Structure & Accountability) COSO ERM - Governance & Decision-Making in Matrix Organizations