Section: Volume D

Section: Volume D

Explanation/Reference:
Explanation:
Reasonableness tests make certain assumptions about the information as the basis for more elaborate data validation tests.
Incorrect Answers:
A: The duplicate test does not identify duplicate transactions; rather it identifies and confirms the validity of duplicates.
B: The control total test does not ensure that all transactions have been extracted, but only ensures that the data are complete.
C: As compared to simplistic, the reasonableness test is a valid foundation for more elaborate data validation tests.

C, and D are incorrect.
An enterprise's risk management capability maturity level is 1 when:
There is an understanding that risk is important and needs to be managed, but it is viewed as a
technical issue and the business primarily considers the downside of IT risk.
Any risk identification criteria vary widely across the enterprise.
Risk appetite and tolerance are applied only during episodic risk assessments.
Enterprise risk policies and standards are incomplete and/or reflect only external requirements and
lack defensible rationale and enforcement mechanisms.
Risk management skills exist on an ad hoc basis, but are not actively developed.
Ad hoc inventories of controls that are unrelated to risk are dispersed across desktop applications.