final kiem noi bo

Which of the following is the best reason for the CAE to consider the organization's strategic plan in developing the annual internal audit plan?

• To emphasize the importance of the internal audit function to the organization.

• To ensure that the internal audit plan will be approved by senior management

• To make recommendations to improve the strategic plan

• To ensure that the internal audit plan supports the overall business objectives

Which of the following is the premier certification sponsored by the IIA?

• Certification in Control Self-Assessment

• Certified Internal Auditor

• Certification in Risk Management Assessment

• Certified Information Systems Auditor

Which of the following is not a potential value driver for implementing ERM?

• Financial results will improve in the short run

• There will be fewer surprises from year to year

• There will be better information available to make risk decisions.

• An organization's risk appetite can be aligned with strategic planning

Which competency is described as the ability to inspire trust through consistent competence and integrity

• Credibility

• Competence

• Courage

• Communication

Which of the following is NOT a risk response strategy for a positive risk?

• Exploiting

• Enhancing

• Transferring

• Acceptance

How does COSO ERM define 'risk'?

• A random event that has no influence on business outcomes

• The possibility that events will occur and affect the achievement of strategy and objectives

• The unavoidable circumstances that must be ignored

• A financial event that is predictable and manageable

While planning an internal audit, the internal auditor obtains knowledge about the auditee to, among other things

• Develop an understanding of the auditee's objectives and risks

• Develop an attitude of professional skepticism about management's assertions

• Make constructive suggestions to management concerning internal control improvements.

• Evaluate whether misstatements in the auditee's performance reports should be communicated to senior management and the audit committee.

Who is responsible for implementing ERM?

• The chief financial officer

• The chief audit executive

• The chief compliance officer

• Management throughout the organization

Assurance, Insight, and Objectivity comprise

• The mission of internal auditing

• The three lines of defense model

• The value proposition

• The objectives of internal auditing

Internal auditing is designed to add value through which of the following activities?

• Assurance and consulting activities aimed at improving operations

• Only identifying non-compliance issues

• Conducting market research

• Monitoring employee performance reviews