Câu 195: IIA-CIA-PART1: Certified Internal Auditor - Part 1 The Internal Audit Activitys Role in Governance Risk and Control

An organization has implemented a new automated payroll system that contains a table of pay rates that are matched to employee job classifications. Which control should an internal auditor suggest in order to ensure that the table is updated correctly, and is used only for valid pay changes?

1. A. Restrict data-table access from management and line supervisors who have the authority to determine pay rates.
2. B. Require a supervisor in the department, who has the ability to change the table, to compare the changes to a signed management authorization.
3. C. Ensure that adequate edit and reasonableness checks are built into the automated system.
4. D. Require a manager, who is independent of the system and who cannot change the table, to authorize and sign-off on any employee pay changes. — đáp án hiện tại