Which of the following is the most significant disadvantage of using checklists to evaluate internal controls?

If an engagement client disputes that a specific action or process is within the scope of the internal audit activity, what would be the most appropriate way for the internal audit activity (IAA) to respond?

Which of the following are generally recognized as essential elements of a corporate social responsibility program?

According to IIA guidance, which of the following roles would be appropriate for an internal auditor regarding fraud risk?
1. Identification.
2. Mitigation.
3. Remediation.
4. Reduction.

What type of risk management strategy is being employed when an organization installs two firewalls to provide protection from unauthorized access to the network?