CRMA — Certification in Risk Management Assurance Guidance Practice Questions

According to IIA guidance, which of the following best describes processes and tools typically used in ongoing internal assessments?

• AA. Benchmarking of the internal audit activity's practices and performance.
• BB. Report of internal assessment results, response plans, and outcomes.
• CC. Analysis of performance metrics such as cycle times.
• DD. Self-assessments and surveys of stakeholder groups.

According to IIA guidance, which of the following is the best example of a system application control?

• AA. A physical security control over a data center.
• BB. A system development life cycle control.
• CC. A program change management control.
• DD. An input control over data integrity.