An Internal Auditor Wants to Determine Whether Employees Are Complying

question 332

Multiple Choice

An internal auditor wants to determine whether employees are complying with the information security policy, which prohibits leaving sensitive information on employee desks overnight. The auditor checked a sample of 90 desks and found eight that contained sensitive information. How should this observation be reported, if the organization tolerates 4 percent noncompliance?

• A) The matter does not need to be reported, because the noncompliant findings fall within the acceptable tolerance limit.
• B) The deviations are within the acceptable tolerance limit, so the matter only needs to be reported to the information security manager.
• C) The incidents of noncompliance fall outside the acceptable tolerance limit and require immediate corrective action, as opposed to reporting.
• D) The incidents of noncompliance exceed the tolerance level and should be included in the final engagement report.

---

Definitions:

Latent Memory Traces

Hidden or dormant impressions from past experiences retained in the brain, potentially influencing future behavior or learning.

Ancestral Past

Refers to historical or evolutionary antecedents of modern humans, impacting genetics, behavior, and societal structures.

Freud's Emphasis

Centers on the role of unconscious processes and childhood experiences in shaping personality and behavior.

Sexuality

The capacity for sexual feelings and their expression, as well as an individual's sexual orientation, preferences, and identity.