Data and system backups are a critical part of business continuity and disaster recovery (BC/DR) strategies, ensuring that organizations can restore data and systems to a prior state in the event of system failure, cyberattacks, or disasters.
* Primary Purpose of Backup Systems:
* The core objective of data and systems backup is to restore data and systems to a previous point in time in case of an unexpected incident.
* According to IIA GTAG on Business Continuity Management, backups enable organizations to recover lost, corrupted, or compromised data from an earlier state.
* Why Not Other Options?
* A. To restore all data and systems immediately after the occurrence of an incident:
* This is a misconception because restoration times depend on the Recovery Time Objective (RTO) and the complexity of the incident.
* B. To set the maximum allowable downtime to restore systems and data after the occurrence of an incident:
* This describes RTO, which is part of business continuity planning but not the primary purpose of backups.
* C. To set the point in time to which systems and data must be recovered after the occurrence of an incident:
* This describes the Recovery Point Objective (RPO), which determines the acceptable amount of data loss but does not define the main goal of backups.
* IIA GTAG - Business Continuity Management
* IIA Practice Guide: Auditing Business Continuity and Disaster Recovery
* IIA Standard 2120 - Risk Management and IT Controls
Step-by-Step Justification:IIA References:Thus, the correct and verified answer is D. To restore data and systems to a previous point in time after the occurrence of an incident

When calculating available audit hours, the CAE must exclude non-engagement activities such as administration, meetings, professional development, and staff coaching. These are essential but not directly part of engagement execution.
Preliminary risk assessment (Option B), documentation (Option C), and reporting (Option D) are all integral steps of an engagement and should be included in engagement hours. Thus, only coaching time (Option A) should be deducted.
Reference:
IIA Practice Guide - Engagement Planning: Considerations for Resource Planning.

Internal development is more attractive when incumbent competitors are expected to retaliate slowly. Slow retaliation gives the entering organization time to build capabilities, customers, distribution, and operational scale without paying an acquisition premium. If an available acquisition target is weak or few bidders exist, acquisition may become more attractive because the purchase price may be favorable. A poor economy may reduce acquisition valuations but may also increase risk; it does not clearly support internal development.
Internal audit should evaluate market-entry decisions by reviewing strategic fit, retaliation risk, capital requirements, integration risk, acquisition premiums, and management capability. Since slow incumbent retaliation supports gradual entry through internal development, Option A is correct.

Innovation in internal audit is reflected in how the function applies new technologies, methodologies, and thought leadership. Measuring staff application of technology in audit fieldwork and their engagement in professional organizations/publications demonstrates innovation and forward-looking practices.
Options A, B, and D measure performance, satisfaction, or compliance but do not specifically address innovation.
Reference:
IIA Practice Guide - Measuring Internal Audit Effectiveness and Efficiency.

Working capital management focuses on short-term assets and liabilities to ensure a business has enough cash and liquid assets to meet its short-term obligations. Effective management of working capital directly impacts liquidity, allowing an organization to maintain operational stability.
Let's analyze each option:
Option A: Liquidity.
Correct.
Liquidity refers to an organization's ability to meet its short-term obligations, such as payroll, supplier payments, and operational expenses.
Working capital management ensures sufficient cash flow and current assets to cover immediate liabilities, making liquidity the primary concern.
IIA Reference: Internal auditors assess financial risk by evaluating liquidity management and cash flow strategies. (IIA Practice Guide: Auditing Liquidity Risk Management) Option B: Profitability.
Incorrect.
While working capital impacts profitability (e.g., through cost control and investment decisions), profitability is more related to revenue and cost management, not just liquidity.
Option C: Solvency.
Incorrect.
Solvency refers to a company's long-term financial stability and its ability to meet debts over time.
Working capital is a short-term financial measure and does not directly determine solvency.
Option D: Efficiency.
Incorrect.
Efficiency relates to resource utilization and operational effectiveness, which are indirectly affected by working capital management but are not its primary focus.
Thus, the verified answer is A. Liquidity.