Okay, let me see. A is creating an audit trail, which is more of a detective control to identify issues after the fact. C is reconciling purchase orders, which is also more of a detective control. D is reviewing expense accounts, which is similar to C. That leaves B as the preventive control option, so I'll go with that.
This looks like a tricky one. I'll need to carefully review the Integration Procedure and the OmniScript to see where the data mapping might be going wrong.
I'm confident I know the answer to this one. The primary objective of promoting a risk-aware culture is to enable risk-based decision making. That's the foundation for everything else, like understanding risk appetite and improving audit results.
upvoted 0 times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Edelmira
5 months agoTu
6 months agoEileen
6 months agoLaurel
6 months agoElena
6 months agoVallie
6 months agoCorazon
6 months agoPaz
6 months agoLeonardo
6 months agoJennifer
6 months agoBuck
6 months agoFrederick
7 months ago