Absolute Free IIA-CIA-Part2-3P Exam Practice for Comprehensive Preparation 

An internal auditor is planning a consuming engagement and the objective is to identify opportunities to improve the efficiency of the organization’s procurement process. The auditor is preparing to conduct a preliminary survey of the area. Which of the following approaches would be most useful to obtain relevant information to support the engagement objective?

Which of the following is not a primary purpose for conducting a walk-through during the initial stages of an assurance engagement? 

While conducting an information security audit, an internal auditor learns that the existing disaster recovery plan is four years old and untested. The auditor also learns that in the four years since the recovery plan was implemented, the information systems have undergone extensive changes. Which of the following actions is most appropriate for the auditor to take? 

An internal auditor is assessing the organization's risk management framework. Which of the following formulas should he use to calculate the residual risk? 

A :

B :

C :

D :

An internal auditor is conducting an initial risk assessment of an audit area and wants to assess management's compliance with privacy laws for safeguarding customer information stored on the organization's servers. Which course of action is appropriate for this phase of the engagement?