This certification validates practical skills in system administration and infrastructure, including deployment, administration, troubleshooting, and resilience. It is intended for professionals operating dependable enterprise technology environments.
An internal auditor needs to test logical controls to determine whether all users access the organization's enterprise resource planning system according to the principle of least privilege.
Which engagement procedure would be most effective in carrying out this test?
An internal auditor performed a review that focused on the organization's process for vetting vendors. The internal auditor's testing identified that 120 out of 130 vendors had a business relationship with the organization's procurement manager that violated conflict-of-interest policies.
Which of the following conclusions could the internal auditor draw from these results?
During planning, the chief audit executive submits a risk-and-control questionnaire to management of the activity under review. Which of the following statements is true regarding the questionnaire?
What is a control implication for an organization that adopts a flat structure?
During engagement planning, which party provides the most accurate and up-to-date description of how organizational processes and key controls operate?