An Internal Auditor Recommended That an Organization Implement Computerized Controls

question 30

Multiple Choice

An internal auditor recommended that an organization implement computerized controls in its sales system in order to prevent sales representatives from executing contracts in excess of their delegated authority levels. A follow-up review found that the sales system had not been modified, but a process had been implemented to obtain written approval by the vice president of sales for all contracts in excess of $1 million. The chief audit executive (CAE) would be justified in reporting this situation to the organization's board if:

• A) In the opinion of the CAE, the level of residual risk assumed by senior management is too high. II. Testing of compliance with the new process finds that all new contracts in excess of $1 million have been approved by the vice president of sales. III. The cost of modifying the sales system to include a preventive control is less than $100,000.
• B) I only
• C) III only
• D) I and III only
• E) I, II, and III

---

Definitions:

Unintended Pregnancies

Pregnancies that are unplanned at the time of conception, often leading to complex personal and social outcomes.

Intrauterine Device (IUD)

A long-acting, reversible contraceptive method that involves the placement of a small, flexible, plastic device into the uterus to prevent sperm from fertilizing the egg.

Guttmacher Institute

A leading research and policy organization committed to advancing sexual and reproductive health and rights through research, policy analysis, and public education.

Reversible Contraception

Birth control methods that can be discontinued, allowing for the return of fertility.