An internal auditor would like to identify the involvement of various organizational units in handling employee travel reimbursement claims. Which of the following methods would be most effective and efficient in completing this task?

Which of the following statements is true regarding the use of non-statistical sampling in auditing control tests?

Internal auditors must exercise due professional care by considering which of the following?
1. Cost of assurance in relation to potential benefits.
2. Adequacy and effectiveness of governance, risk management, and control processes.
3. Management's competency level in the area being evaluated.
4. Probability of significant errors, fraud, or noncompliance.

According to COSO, which of the following is not considered one of the components of an organization's internal environment?

Who is responsible for setting the risk appetite?