In project integration management, the coordination of technical and organizational interfaces typically occurs during the Project Plan Execution phase. At this stage, project managers and teams work together to:
* Implement the project plan.
* Manage interdependencies between technical and business processes.
* Ensure all project components are aligned.
* Coordinate different stakeholders, vendors, and internal teams.
* (A) Project plan development:
* This phase involves defining objectives, scope, timelines, and resource allocation but does not focus on coordination of interfaces.
* (B) Project plan execution (Correct Answer):
* This phase involves implementing the project and actively managing its technical and organizational interfaces, making it the correct answer.
* (C) Integrated change control:
* This process ensures that project changes are properly managed, but it does not focus on initial coordination of interfaces.
* (D) Project quality planning:
* This phase focuses on setting quality standards and criteria, but not on the integration of technical and organizational interfaces.
* IIA Practice Guide: Auditing Projects - Highlights that project execution is where coordination across different teams and stakeholders is critical.
* PMBOK Guide (Project Management Body of Knowledge) - States that integration management during execution ensures that all elements of the project work together effectively.
* COSO ERM Framework - Supports the alignment of business processes and technical execution as part of risk management.
Analysis of Each Option:IIA References:Conclusion:Since technical and organizational coordination is essential during project execution, option (B) is the correct answer.

Comprehensive and Detailed In-Depth Explanation:
A favorable labor efficiency variance (Option 1) occurs because experienced workers complete tasks more efficiently, reducing time and waste.
An adverse labor rate variance (Option 2) arises because hiring experienced employees increases labor costs compared to budgeted rates.
Option 3 (Adverse labor efficiency variance) is incorrect because skilled workers typically improve efficiency.
Option 4 (Favorable labor rate variance) is incorrect because higher wages increase costs, leading to an adverse variance.
Thus, the correct answer is A (1 and 2 only).
Reference: IIA Financial Management - Variance Analysis in Cost Accounting

Change management is a structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state while minimizing risk and disruption.
* Definition of Change Management:
* Change management ensures that all modifications to IT systems, processes, and applications are controlled and documented.
* As per the IIA GTAG on Change Management, an effective change management process should be repeatable, defined, and predictable to reduce errors and system failures.
* Why Change Management Must Be Structured?
* Uncontrolled changes increase risks such as security vulnerabilities, data loss, and system downtime.
* Best practices (e.g., ITIL, COBIT) require organizations to follow a consistent change management process to protect the production environment.
* A structured approach includes:
* Documenting change requests
* Testing in non-production environments
* Gaining approvals before deployment
* Why Not Other Options?
* A. The degree of risk associated with a proposed change determines whether the change request requires authorization:
* All changes should require authorization, not just high-risk ones.
* B. Program changes generally are developed and tested in the production environment:
* Changes should never be tested in production due to risk exposure. Best practice is to test in a development or staging environment first.
* C. Changes are only required by software programs:
* Change management applies broadly to IT infrastructure, business processes, security protocols, and governance frameworks, not just software.
* IIA GTAG - Change Management Controls
* COBIT 2019 - Change Management Best Practices
* ITIL Change Management Framework
* IIA Standard 2120 - Risk Management
Step-by-Step Justification:IIA References:Thus, the correct and verified answer is D. To protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.

The described situation is a classic social engineering attack, specifically a phishing or CEO fraud (business email compromise) attempt. Social engineering exploits human psychology rather than technical vulnerabilities. In this case, the attacker attempted to impersonate the CEO and trick the board member into making an unauthorized payment.
(A) Incorrect - A risk of spyware and malware.
Spyware and malware typically involve malicious software installed on a device, which is not the case here.
This attack relied on deception rather than malware to obtain unauthorized funds.
(B) Incorrect - A risk of corporate espionage.
Corporate espionage involves unauthorized data theft, sabotage, or insider threats.
The attacker here attempted financial fraud, not intellectual property theft.
(C) Incorrect - A ransomware attack risk.
Ransomware encrypts files and demands payment for decryption.
There is no mention of system encryption or ransom demands in this case.
(D) Correct - A social engineering risk.
The attacker impersonated the CEO and used urgency to manipulate the board member into processing a fraudulent payment.
This technique is a business email compromise (BEC) scam, a well-known social engineering tactic.
IIA's GTAG (Global Technology Audit Guide) - Cybersecurity Risks and Controls Discusses social engineering and its impact on financial fraud.
NIST Cybersecurity Framework - Social Engineering Threats
Defines social engineering tactics, including email impersonation and phishing.
COBIT Framework - Information Security Governance
Recommends controls to mitigate social engineering risks, such as employee training and email authentication mechanisms.
Analysis of Answer Choices:IIA References and Internal Auditing Standards:

Overseas production usually has the highest market-entry cost because it may require investment in foreign facilities, equipment, employees, supply chains, local compliance, management infrastructure, tax planning, and operational controls. It also exposes the organization to political, currency, labor, environmental, and regulatory risks. Exporting is generally less costly because products are produced domestically and sold abroad. Licensing usually requires lower investment because the licensee performs production or distribution in exchange for fees or royalties. Joint ventures may involve shared costs and risks with a local partner, making them less costly than wholly owned overseas production in many cases. Internal audit should evaluate whether management's expansion method is consistent with risk appetite, available resources, and control capability. Therefore, Option D is correct.