While Conducting an Audit of a Third Party's Web-Based Payment

question 73

Multiple Choice

While conducting an audit of a third party's Web-based payment processor, an internal auditor discovers that a programming error allows customers to create multiple accounts for a single mailing address. Management agrees to correct the program and notify customers with multiple accounts that the accounts will be consolidated. Which of the following actions should the auditor take? 1. Schedule a follow-up review to verify that the program was corrected and the accounts were consolidated. 2. Evaluate the adequacy and effectiveness of the corrective action proposed by management. 3. Amend the scope of the subsequent audit to verify that the program was corrected and that accounts were consolidated. 4. Submit management's plan of action to the external auditors for additional review.

• A) 1 and 2
• B) 1 and 4
• C) 2 and 3
• D) 3 and 4

---

Definitions:

General Population

The total population or society that is not segmented by any particular criteria, such as disease status, employment, or other.

Attack Rate

The percentage of an at-risk population that contracts a disease during a specified time period.

Influenza

An acute viral infection that affects the respiratory system, causing fever, headache, and severe malaise, among other symptoms; also known as the flu.

Minas Tirith

A fictional city from J.R.R. Tolkien's Middle-earth universe, serving as the capital of the Kingdom of Gondor in the author's "The Lord of the Rings" series.