Which of the following is an example of collusion?

According to IIA guidance, which of the following best describes processes and tools typically used in ongoing internal assessments?

Internal auditors must exercise due professional care by considering which of the following?
1. Cost of assurance in relation to potential benefits.
2. Adequacy and effectiveness of governance, risk management, and control processes.
3. Management's competency level in the area being evaluated.
4. Probability of significant errors, fraud, or noncompliance.

Which of the following control activities is the most effective to ensure users' levels of access are appropriate for their current roles?

An organization is beginning to implement an enterprise risk management program. One of the first steps is to develop a common risk language. Which of the following statements about a common risk language is true?