List of questions
Related questions
Question 383 - IIA-CIA-Part2 discussion
An internal audit activity plans its engagements based on an organization-wide risk assessment. According to IIA guidance, which of the following statements is true regarding the required frequency of the risk assessment?
A.
The risk assessment must be performed at least quarterly.
B.
The risk assessment must be performed at least annually.
C.
The risk assessment must be performed at least once every five years, in alignment with the internal audit activity's quality assurance and improvement program.
D.
There is no specific requirement; a risk assessment should be performed as needed to account for changes in the business environment.
Your answer:
0 comments
Sorted by
Leave a comment first