While Performing an Audit of the Human Resources Department, an Internal

question 357

Multiple Choice

While performing an audit of the human resources department, an internal auditor discovered unencrypted files containing the personal information of employees stored on a public shared drive. According to IIA guidance, which of the following actions by the auditor would be the most appropriate?

• A) Remove the files containing the social security numbers and personal information.
• B) Communicate the issue to the chief audit executive as well as IT and legal departments.
• C) Change permissions to the shared drive to only allow access to human resources personnel.
• D) Immediately review the audit logs to see if anyone has accessed this information and follow-up.

---

Definitions:

Unkempt

Refers to an appearance or condition that is messy, disorderly, or not properly maintained.

Entitled to Payment

Refers to having a legal right or claim to receive a specified amount of money for goods provided, services rendered, or as compensation.

Carlill v. Carbolic Smoke Ball Co.

A landmark 1892 English court case that established important principles in contract law, particularly in regard to unilateral contracts.

Marketing Practice

The methods and tactics businesses use to promote and sell their products or services.