An Internal Auditor Wants to Determine Whether Employees Are Complying

question 332

Multiple Choice

An internal auditor wants to determine whether employees are complying with the information security policy, which prohibits leaving sensitive information on employee desks overnight. The auditor checked a sample of 90 desks and found eight that contained sensitive information. How should this observation be reported, if the organization tolerates 4 percent noncompliance?

• A) The matter does not need to be reported, because the noncompliant findings fall within the acceptable tolerance limit.
• B) The deviations are within the acceptable tolerance limit, so the matter only needs to be reported to the information security manager.
• C) The incidents of noncompliance fall outside the acceptable tolerance limit and require immediate corrective action, as opposed to reporting.
• D) The incidents of noncompliance exceed the tolerance level and should be included in the final engagement report.

---

Definitions:

Visual Pathway

The neural path through which visual information travels from the eye to the brain, involving specific areas and structures critical for processing and interpreting visual stimuli.

Photoreceptors

Specialized cells located in the retina of the eye that respond to light, enabling the perception of vision.

Cortex

The cortex is the outer layer of the cerebrum of the brain, involved in high-level functions such as consciousness, thought, emotion, reasoning, language, and memory.

Bipolar Cells

Nerve cells in the retina that are involved in the transmission of visual signals from the photoreceptors to the ganglion cells.