IIA-ACCA Exam - Topic 10 Question 84 Discussion

Actual exam question for IIA's IIA-ACCA exam

Question #: 84
Topic #: 10

Which of the following statements accurately describes the responsibility of the internal audit activity regarding IT governance?

1. The internal audit activity does not have any responsibility because IT governance is the responsibility of the board and senior management of the organization.

2. The internal audit activity must assess whether the IT governance of the organization supports the organization's strategies and objectives.

3. The internal audit activity may assess whether the IT governance of the organization supports the organization's strategies and objectives.

4. The internal audit activity may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization's strategies and objectives.

A1 only.

B4 only.

C2 and 4.

D3 and 4.

Show Suggested Answer

Suggested Answer: C

by Chantay at Aug 27, 2024, 05:10 PM

Limited Time Offer

25%

Off

Get Premium IIA-ACCA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeanice

4 months ago

I’m surprised they don’t have more responsibility in this area.

upvoted 0 times

...

Julio

4 months ago

Definitely agree with 2 and 4, makes total sense!

upvoted 0 times

...

Irma

4 months ago

Wait, can they really just accept requests for advisory services?

upvoted 0 times

...

Portia

4 months ago

I think internal audit should assess IT governance too!

upvoted 0 times

...

Cheryl

5 months ago

IT governance is mainly for the board and senior management.

upvoted 0 times

...

Bernardo

5 months ago

I’m confused about whether internal audit must assess IT governance or just may. I feel like I need to double-check that part.

upvoted 0 times

...

Queen

5 months ago

I practiced a question similar to this, and I think internal audit can provide advisory services, so maybe options 2 and 4 are correct?

upvoted 0 times

...

Andra

5 months ago

I’m not entirely sure, but I feel like option 2 makes sense since internal audit should align with the organization's objectives.

upvoted 0 times

...

Rebeca

5 months ago

I remember that IT governance is mainly the board's responsibility, but I think internal audit has some role in assessing it too.

upvoted 0 times

...

Lera

5 months ago

This seems like a straightforward governance question. I'm pretty confident I can narrow it down to the correct answer based on my understanding of the internal audit function's role.

upvoted 0 times

...

Laura

5 months ago

Okay, let's think this through step-by-step. The internal audit activity's responsibilities are the focus, and the options describe different levels of involvement, from no responsibility to performing advisory services. I think I've got a handle on this.

upvoted 0 times

...

Kara

5 months ago

Hmm, I'm a bit unsure about this one. The wording of the options is pretty similar, so I'll need to read them carefully to figure out the differences.

upvoted 0 times

...

Peter

5 months ago

This question seems pretty straightforward. I think the key is to focus on the responsibilities of the internal audit activity, not just IT governance in general.

upvoted 0 times

...

Idella

6 months ago

I'm a little confused by the nuances between the options. I'll need to re-read them a few times to make sure I understand the distinctions before selecting an answer.

upvoted 0 times

...

Amie

6 months ago

I'm pretty confident that option C is the best choice here. S3 Standard is designed for frequent access, which fits the usage pattern, and a static website is a simple and cost-effective way to deliver the images. The other options involving EC2 and EBS/EFS seem like overkill for this use case.

upvoted 0 times

...

Alishia

6 months ago

Whoa, this is a lot of information to process. Let me break it down step-by-step and make sure I understand all the details before jumping into the calculations.

upvoted 0 times

...

Iluminada

11 months ago

I'm going with B. The internal audit activity doesn't have any real responsibility when it comes to IT governance. That's the board and senior management's job. The auditors can just sit back and enjoy the show. *laughs*

upvoted 0 times

Jesus

10 months ago

Yes, that's correct. They can even accept requests from management to provide advisory services on how IT governance supports the organization's strategies and objectives.

upvoted 0 times

...

Haydee

10 months ago

Oh really? I didn't know that. So, they do play a role in ensuring everything is in line with the organization's goals?

upvoted 0 times

...

Mary

11 months ago

I think you might be mistaken. The internal audit activity actually has a responsibility to assess whether IT governance supports the organization's strategies and objectives.

upvoted 0 times

...

Carlota

11 months ago

D sounds good to me. The internal audit activity can assess the IT governance, but they don't have to. They can just provide advisory services if the management asks for it. Keeping it flexible, you know? *winks*

upvoted 0 times

...

Aleisha

11 months ago

Hmm, I'm not so sure. Maybe the internal audit activity can just accept requests from management to perform advisory services, without any actual responsibility. After all, they're not the ones making the strategic decisions, right? *chuckles*

upvoted 0 times

Ilona

10 months ago

User 2: Yeah, that makes sense. They can also accept requests from management to provide advisory services.

upvoted 0 times

...

Vivan

11 months ago

User 1: I think the internal audit activity must assess whether the IT governance supports the organization's strategies and objectives.

upvoted 0 times

...

Quentin

11 months ago

I think the answer is C. The internal audit activity has the responsibility to assess whether the IT governance supports the organization's strategies and objectives. This is not just a request from management, it's a core responsibility.

upvoted 0 times

...