Okay, let me see. A is creating an audit trail, which is more of a detective control to identify issues after the fact. C is reconciling purchase orders, which is also more of a detective control. D is reviewing expense accounts, which is similar to C. That leaves B as the preventive control option, so I'll go with that.
This looks like a tricky one. I'll need to carefully review the Integration Procedure and the OmniScript to see where the data mapping might be going wrong.
I'm confident I know the answer to this one. The primary objective of promoting a risk-aware culture is to enable risk-based decision making. That's the foundation for everything else, like understanding risk appetite and improving audit results.
upvoted 0
times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Edelmira
7 months agoTu
7 months agoEileen
7 months agoLaurel
8 months agoElena
8 months agoVallie
8 months agoCorazon
8 months agoPaz
8 months agoLeonardo
8 months agoJennifer
8 months agoBuck
8 months agoFrederick
8 months ago