Which of the following lists the audit activities in the order in which they would generally be completed during a preliminary survey?I. Write detailed audit procedures.II. Identify client objectives, goals, and standards.III. Identify risks and controls intended to prevent associated losses.IV. Determine relevant engagement objectives.
Determining whether risk management processes are effective is a judgment resulting from the internal auditor’s assessment that1. Organizational objectives support and align with the organization’s mission2. Significant risks are identified and assessed3. Appropriate risk responses are selected that align risks with the organization’s risk appetite4. Relevant risk information is captured and communicated in a timely manner across the organization