An internal auditor performed a risk assessment and concluded that the controls over access privileges...

Question

An internal auditor performed a risk assessment and concluded that the controls over access privileges to a bank account were appropriate. Later, the auditor learned that a contractor was using a shared password provided by an authorized user of the account. Which of the following statements best describes the auditor's application of due professional care?

Accepted Answer

C. Due professional care was not exercised because the residual risk from the possibility of authorized users sharing their passwords was not considered.

Answer

A. Due professional care was exercised, despite the auditor’s failure to identify the significant risk.

Answer

B. Due professional care was not exercised because the auditor failed to identify all the significant risks during the risk assessment.

Answer

D. Due professional care was not exercised because the auditor failed to conduct interviews to obtain testimonial evidence of possible password sharing

Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Exam IIA-CIA-Part1 All Questions

IIA CIA IIA-CIA-Part1 Question # 108 Topic 11 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: