A. The CAE should coordinate with, and review the work of, the chief health and safety officer to gain an understanding of whether risks related to health and safety are managed properly.

B. The CAE has no role to play, because the chief health and safety officer reports to a senior executive.

C. The CAE should give periodic reports directly to the regulator regarding health and safety issues, as it is the appropriate regulatory oversight body.

D. The CAE should hire an independent external specialist to conduct an annual assessment and provide assurance over the effectiveness of the health and safety program and the reliability of its reports.

A. Observe and test control and monitoring procedures and related reporting.

B. Research and review relevant industry information concerning key risks.

C. Conduct interviews with line and senior management on current practices.

D. Review corporate policies and board minutes for examples of risk discussions.

A. The strategic plan is a relatively stable document on which to base audit planning.

B. Strategic plans are helpful to identify major areas of activity, which may direct the allocation of internal audit activity resources.

C. Strategic plans reflect the organization ' s business objectives and overall attitude toward risk.

D. Strategic plans are likely to show areas of weak financial controls.

A. Management of the area under review must address the engagement supervisor ' s review notes before the audit report can be finalized.

B. The review notes may be cleared from the final documentation once the engagement supervisor's concerns have been addressed.

C. Review notes provide documented proof that the engagement is supervised properly and must be retained for the quality assurance and improvement program.

D. The chief audit executive must initial or sign the engagement supervisor's review notes to provide evidence of appropriate engagement supervision.

A. Weighted risk factors

B. Surveys

C. Management produced analysis 0

D. Facilitated team workshops

A. The organization ' s employee recruiting and retention policies

B. The presence of an independent critical mass

C. The established philosophy and operating style of senior management

D. The articulated internal control objectives of the organization

A. Disclose the fact that auditors who perform the work may not be subject matter experts in the topic of the review.

B. Clarify that matters discovered during the engagement may also be reported to senior management and the audit committee.

C. Disclose the fact that follow-up reviews may be conducted to ensure that recommendations are implemented adequately.

D. Define the duties and responsibilities needed from management to perform the engagement.

A. ICQs do not allow for evaluating multiple locations.

B. ICQs require significant auditor follow-up, as different managers may give different responses.

C. ICQ respondents have incentives to answer that there are internal controls in place.

D. ICQs do not allow for open-ended questions.

A. The engagement scope has been thoroughly outlined with minimal expected deviation.

B. The engagement follows a clearly defined sequence of activities from start to finish.

C. The engagement involves a planned structure that supports task segmentation.

D. The engagement objectives are simple and can be achieved with limited coordination.

A. PPS sampling s used to reach conclusions regarding monetary amounts, attribute sampling is not.

B. PPS sampling is used to roach conclusions regarding rates of occurrence, attribute sampling is not.

C. PPS sampling a applied within the context of testing controls attribute sampling s not.

D. Attribute sampling is affected by the monetary book value of the population PPS sampling is not