IIA Updated IIA-CIA-Part2 Exam Questions and Answers by kristian

A risk that is deemed "unacceptable" to the organization is one where the residual risk (the remaining risk after controls are applied) exceeds the organization's risk tolerance level. This means that despite controls in place, the level of risk remains higher than what the organization is willing to accept. Identifying such risks is critical for ensuring appropriate management action to mitigate them further. References:

The IIA’s Practice Guide on Risk Management.

COSO’s Enterprise Risk Management – Integrating with Strategy and Performance.

When performing a consulting project to assist in making a decision on a new software system, the engagement objectives would be determined by understanding the engagement client's expectations. This ensures that the consulting engagement is aligned with what the client needs and expects, leading to more relevant and useful recommendations.

References:

IIA Standards: 2010 - Planning

IIA Practice Guide: Consulting Services

External benchmarking using trend analysis involves comparing a company's performance metrics with industry standards or averages over a certain period to identify trends and areas for improvement. Comparing common-size financial statements of the subsidiary with the averages of the industry for the last two periods allows for a normalized comparison by expressing financial statement items as a percentage of a common base figure (e.g., total assets or sales). This method highlights the subsidiary's financial structure and performance trends in relation to industry norms, facilitating a comprehensive analysis. References:

"Internal Auditing: Assurance & Advisory Services" (The Institute of Internal Auditors)

"Benchmarking: An Essential Tool for Assessment, Improvement, and Market Leadership" (Michael J. Spendolini)