Câu 68: IIA-CIA-PART2: Certified Internal Auditor - Part 2 Conducting the Internal Audit Engagement

A bank uses a risk analysis matrix to quantify the relative risk of auditable entities. The analysis involves rating auditable entities on risk factors using a scale of 1 to 10, with 10 representing the greatest risk. A partial list of risk factors and the ratings given to three of the bank's departments is provided below: Which of the following statements regarding risk in the department is true?

1. A. As compared to departments A and C, department B has a stronger control system to compensate for the greater complexity of the department's transactions and dollar value of its assets.
2. B. The internal audit activity should schedule audits of department B more often than audits of department C because of the relative control strength of department C as compared to department B.
3. C. The nature of department A's control structure may be justified by the nature of the department's assets and the complexity of its transactions. — đáp án hiện tại
4. D. The relative ranking of the departments in order of their risk, from greatest to least risk, is: A; C; B.