The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls.
Which three steps can the Control Owner perform to kick-off assessments for only those two controls?
(Choose three.)

Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of "Closed" to an access incident? (Choose two.)

An organization has a list of companies with which they no longer wish to do business. The list is not stored in their ERP Could but is stored in a file.
Whichtransaction model will identify payments made to these companies?

Your client has subscribed to Financial Reporting Compliance and would like to address risks using treatment plans.
Which option shows the settings that will help in achieving this configuration?

Your client needs to perform Design Review and Certification assessment for all their controls. Identify two options that show how this requirement can be met. (Choose two.)