View all questions & answers for the IIA-CIA-Part3-3P exam
When developing an effective risk-based plan to determine audit priorities, an internal audit activity should start by:
Identifying risks to the organization's operations.
Observing and analyzing controls.
Prioritizing known risks.
Reviewing organizational objectives.
Submit