Which of the following are likely indicators of ineffective change management? 1. IT management is unable to predict how a change will impact interdependent systems or business processes. 2. There have been significant increases in trouble calls or in support…

According to IIA guidance on IT, which of the following best describes a logical access control? A. Require complex passwords to be established and changed quarterly. B. Require swipe cards to control entry into secure data centers. C. Monitor access…

At what point during the systems development process should an internal auditor verify that the new application’s connectivity to the organization’s other systems has been established correctly? A. Prior to testing the new application. B. During testing of the new…

Which of the following actions is most likely to gain support for process change? A. Set clear objectives. B. Engage the various communities of practice within the organization. C. Demonstrate support from senior management. D. Establish key competencies.

Which of the following statements accurately describes one of the characteristics that distinguishes a multinational company from a domestic company? A. A multinational company has stockholders in other countries. B. A multinational company exports its products to other countries. C.…

An internal auditor was asked to review an equal equity partnership. In one sampled transaction, Partner A transferred equipment into the partnership with a selfdeclared value of $10,000, and Partner B contributed equipment with a selfdeclared value of $15,000. The…

Which of the following phases of a business cycle are marked by an underuse of resources? 1. The trough. 2. The peak. 3. The recovery. 4. The recession. A. 1 and 3 only B. 1 and 4 only C. 2…

According to IIA guidance, which of the following would be the best first step to manage risk when a third party is overseeing the organization’s network and data? A. Creating a comprehensive reporting system for vendors to demonstrate their ongoing…

The audit committee of a global corporation has mandated a change in the organization’s business ethics policy. Which of the following approaches describes the best way to accomplish the policy’s diffusion worldwide? A. Deploy the policy in the corporate headquarters’…

According to IIA guidance, which of the following is a typical risk associated with the tender process and contracting stage of an organization’s IT outsourcing life cycle? A. The process is not sustained and is not optimized as planned. B.…