IIA IIA-CIA-Part1 Exam With Confidence Using Practice Dumps

According to the IIA Code of Ethics, the principle of confidentiality emphasizes that internal auditors must refrain from disclosing confidential information acquired in the course of their duties unless legally obligated to do so. Using a personal unencrypted memory stick for transferring audit files not only risks the security of the information but also contravenes the confidentiality principles by potentially exposing sensitive data to unauthorized access.

IIA Code of Ethics, Principle of Confidentiality

The first step in identifying relevant fraud risk factors involves gaining an understanding of the organization ' s business activities. This understanding helps auditors to recognize and evaluate the potential fraud risks present in different areas of the organization. Gathering this information forms the foundation for further analysis and the implementation of appropriate controls.

IIA Guidance on Fraud Risk Assessment

Comparing vendor addresses to employee addresses is a common audit test to detect fictitious invoices. Fictitious invoices are often created by employees who use their addresses or addresses of associates as vendor addresses to facilitate fraud.

Option B: Matching cancelled checks to invoices ensures payment was made but does not specifically detect fictitious invoices.

Option C: Searching for duplicate payments addresses duplicate invoices but not necessarily fictitious ones.

Option D: Checking employee bank records could indicate fraud but is invasive and less direct than comparing addresses.

IIA Practice Guide: Fraud Detection.

COSO Fraud Risk Management Guide.