Save
The Committee of D. The organization assesses substantial changes that
Sponsoring Organizations might affect its strategy and objectives.
of the Treadway
Commission's (COSO)
Enterprise Risk
Management—Integrating
with Strategy and
Performance is composed
of a set of principles
organized into five
interrelated components.
Which of the following is
NOT one of the principles
pertaining to the review
and revision component?
A. The organization
identifies risk that impacts
its performance and
ability to meet objectives.
B. The organization
reviews its risk and
performance. C. The
organization pursues
improvement in enterprise
risk management. D. The
organization assesses
substantial changes that
might affect its strategy
and objectives.
,Which of the following D. All of the above
should the internal audit
function include in its
communications with
senior management and
the board of directors
about fraud?
A. Whether management
possesses the necessary
skills, resources, and
inclination to provide
effective fraud risk
management B.
Management's level of
cooperation with the
assessment of the
organization's fraud risk
governance and
management C. Any
significant residual fraud
risks D. All of the above
In defining the objectives true
of the fraud risk
management program,
management should
express risk appetite in a
manner that is appropriate
for the organization's
culture and operations.
A. True B. False
,Having an auditor ask true
employees questions such
as, "Has anyone ever
asked you to do anything
that you felt was illegal or
unethical?" can be an
effective method of
uncovering fraud within an
organization.
A. True B. False
Government auditors' true
requirements for reporting
fraud may be subject to
specific provisions of the
audit mandate and can
vary depending on the
jurisdiction.
A. True B. False
, Which of the following is A. The risk management program is dynamic and
NOT one of the eight responsive to change.
principles for risk
management provided by
International Organization
for Standardization (ISO)
31000:2018?
A. The risk management
program is dynamic and
responsive to change. B.
The risk management
program is customized
and proportionate to the
organization's operations
and objectives. C. The risk
management program
takes human and cultural
factors into account. D.
The risk management
program is based on
effective leadership and
commitment