IIA Updated IIA-CIA-Part3 Exam Questions and Answers by kody

IT governance controls ensure that an organization's IT systems align with business objectives, manage risks, and comply with regulatory requirements. These controls cover areas such as security, financial oversight, change management, and operational efficiency.

Let’s analyze each option:

Option A: Controls that focus on segregation of duties, financial, and change management.

Correct.

Segregation of duties (SoD) prevents conflicts of interest and reduces fraud risk.

Financial controls ensure IT expenditures align with budgets and policies.

Change management controls ensure system modifications follow formal approval and testing procedures.

These areas are core components of IT governance, ensuring security, compliance, and efficiency.

IIA Reference: Internal auditors evaluate IT governance using frameworks like COBIT (Control Objectives for Information and Related Technologies) and ISO 27001. (IIA GTAG: Auditing IT Governance)

Option B: Personnel policies that define and enforce conditions for staff in sensitive IT areas.

Incorrect.

While personnel policies support IT security, they do not fully represent IT governance controls. IT governance is broader and includes risk management, compliance, and operational efficiency.

Option C: Standards that support IT policies by more specifically defining required actions.

Incorrect.

Standards are part of IT governance but are not controls themselves. IT governance requires enforcement mechanisms like segregation of duties and change management to ensure compliance.

Option D: Controls that focus on data structures and the minimum level of documentation required.

Incorrect.

While data governance is a subset of IT governance, IT governance includes wider financial, security, and operational controls.

Thus, the verified answer is A. Controls that focus on segregation of duties, financial, and change management.

Manufacturing costs are classified into three main categories: direct materials, direct labor, and manufacturing overhead. These categories help organizations determine product costs, pricing strategies, and financial reporting.

Why Option B (Overhead costs, direct labor, direct materials) is Correct:

Direct materials: Raw materials used directly in production (e.g., wood for furniture).

Direct labor: Labor costs directly tied to production (e.g., factory workers assembling a product).

Manufacturing overhead: Indirect costs related to production (e.g., depreciation, factory utilities, maintenance).

These categories align with GAAP, IFRS, and cost accounting standards.

Why Other Options Are Incorrect:

Option A (Direct materials, indirect materials, raw materials):

"Indirect materials" and "raw materials" are part of manufacturing overhead and direct materials, respectively, but do not form a primary cost classification.

Option C (Direct materials, direct labor, depreciation on factory buildings):

Depreciation on factory buildings is an overhead cost, not a separate category.

Option D (Raw materials, factory employees' wages, production selling expenses):

Selling expenses are not part of manufacturing costs; they are part of operating expenses.

IIA Practice Guide – Auditing Cost Management: Defines manufacturing cost classifications.

IFRS & GAAP Cost Accounting Standards: Outline manufacturing cost components.

COSO Framework – Cost Control Guidelines: Emphasizes accurate cost allocation in financial reporting.

IIA References:

Strategic Initiatives and Their Drivers:

Organizations create and prioritize new strategic initiatives based on internal and external factors that affect their success.

Threats and opportunities, identified through strategic planning and risk assessment, are the primary drivers for launching new initiatives.

This aligns with the SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis framework, which helps organizations identify external risks and growth opportunities.

Why Threats and Opportunities Drive Strategic Initiatives:

Opportunities: Organizations may invest in new products, markets, or technologies to capitalize on emerging trends and gain a competitive edge.

Threats: External challenges such as regulatory changes, market competition, and economic downturns necessitate proactive strategies to mitigate potential risks.

Why Other Options Are Incorrect:

A. Risk tolerance:

While risk tolerance defines an organization’s willingness to accept risk, it is not the primary driver for creating new initiatives.

B. Performance:

Performance evaluation helps measure the success of initiatives, but it does not directly drive new strategies.

D. Governance:

Governance ensures oversight and compliance but does not initiate strategic changes unless influenced by external threats and opportunities.

IIA’s Perspective on Strategic Planning and Risk Management:

IIA Standard 2010 – Planning states that internal auditors must assess how organizations identify and respond to threats and opportunities when developing strategic initiatives.

COSO Enterprise Risk Management (ERM) Framework highlights that strategic planning should integrate risk management, ensuring that organizations adapt to evolving external conditions.

IIA References:

IIA Standard 2010 – Planning

COSO Enterprise Risk Management (ERM) Framework

SWOT Analysis in Strategic Decision-Making

Thus, the correct and verified answer is C. Threats and opportunities.