IIA Exam IIA-CIA-Part1 Topic 4 Question 42 Discussion

Actual exam question for IIA's IIA-CIA-Part1 exam

Question #: 42
Topic #: 4

A manufacturing organization's chief audit executive (CAE) was approached by the head of security from one of the manufacturer's third party suppliers The head of security requested internal audit records from a recent audit engagement involving the third-party supplier The head of security believed those records contained information that would enable to identify employees of the third-party supplier who may be involved m fraudulent activities What is the most appropriate course of action for the CAE?

AObtain approval from the manufacturer's audit committee regarding the release of audit records

BRelease the records but first remove all data regarding the manufacturing organization s internal actions and procedures

CDeny access to the records as the third party supplier s security learn should be able to investigate then own employees.

DConsult with the manufacturer's senior management to determine whether releasing tie records would be appropriate

Show Suggested Answer

Suggested Answer: D

by Erinn at Dec 25, 2023, 07:32 PM

Limited Time Offer

25%

Off

Get Premium IIA-CIA-Part1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jamal

3 months ago

I bet the third-party supplier's security team is just looking for some juicy gossip in those audit records. Who needs evidence when you can just spread rumors?

upvoted 0 times

Eloisa

1 months ago

C: Deny access to the records as the third-party supplier's security team should be able to investigate their own employees.

upvoted 0 times

...

Sherita

1 months ago

B: Release the records but first remove all data regarding the manufacturing organization's internal actions and procedures

upvoted 0 times

...

Julio

2 months ago

A: Obtain approval from the manufacturer's audit committee regarding the release of audit records

upvoted 0 times

...

Leota

3 months ago

Maybe the third-party supplier's security team should just use a ouija board to investigate their employees. It would be more mysterious and fun than just looking at our boring audit records.

upvoted 0 times

...

Corazon

3 months ago

Option B seems like a good compromise. Redacting the sensitive information and then releasing the records could help the third-party supplier while still protecting the organization's internal operations. It's a balanced approach.

upvoted 0 times

Darnell

1 months ago

D: Consult with the manufacturer's senior management to determine whether releasing the records would be appropriate

upvoted 0 times

...

Jacqueline

1 months ago

C: Deny access to the records as the third-party supplier's security team should be able to investigate their own employees

upvoted 0 times

...

Lisha

2 months ago

B: Release the records but first remove all data regarding the manufacturing organization's internal actions and procedures

upvoted 0 times

...

Angelo

2 months ago

A: Obtain approval from the manufacturer's audit committee regarding the release of audit records

upvoted 0 times

...

Krystina

3 months ago

I think option A is the best course of action. Getting approval from the audit committee is crucial.

upvoted 0 times

...

Lindy

3 months ago

I'm leaning towards Option D. The CAE should consult with senior management to determine the best course of action. Releasing the records could potentially compromise the organization's internal processes, but senior leadership might think it's worth the risk to assist the third-party supplier.

upvoted 0 times

Bethanie

2 months ago

B: Yeah, they can help us determine if it's worth the risk to assist the third-party supplier.

upvoted 0 times

...

Allene

2 months ago

A: I think we should consult with senior management before releasing the records.

upvoted 0 times

...

Stevie

2 months ago

Consulting with senior management is a good idea. They can provide guidance on whether to release the records or not.

upvoted 0 times

...

Lashawna

3 months ago

I think Option D is the best choice. Senior management can help decide if releasing the records is worth the risk.

upvoted 0 times

...

Mitsue

3 months ago

I agree with Stefania. It's important to get approval before releasing the records.

upvoted 0 times

...

Stefania

3 months ago

I think the CAE should consult with senior management first.

upvoted 0 times

...

Sylvie

3 months ago

I agree with Brice. The CAE should deny access to the records to protect the organization's internal procedures and actions. The third-party supplier should handle their own employee investigations.

upvoted 0 times

...

Dalene

3 months ago

I believe the CAE should deny access to the records and let the third-party supplier's security team handle the investigation.

upvoted 0 times

...

Brice

3 months ago

Option C seems like the most appropriate choice. The internal audit records should remain confidential and not be shared with the third-party supplier's security team. They should investigate their own employees without accessing our sensitive information.

upvoted 0 times

...

Tracey

3 months ago

I agree with Earnestine. It's important to consider the potential impact of releasing the records.

upvoted 0 times

...

Earnestine

4 months ago

I think the CAE should consult with senior management before releasing the records.

upvoted 0 times

...