IIA-CCSA Practice Test

__________ is relating to the entity’s fulfillment with applicable laws and regulations.

Who identified internal control components including Control environment, Information &
communication, risk assessment, control activities and Monitoring?

A.

The American Institute of Standards (AIS)

B.

The American Institute of Certified Professional Accountants (AICPA)

C.

 The American Institute of Certified Control (AICC)

D.

The American Institute of Professional Studies (AIPS

In traditional approach, final report is issued by management and in control selfassessment
approach it is issued by work teams’.

A.

True

B.

False

The policy statement that defines the objectives for and commitment to risk management
within the organization’s strategic and operational context is called:

A.

Risk management

B.

Enterprise risk management

C.

Strategic risk management

D.

Operational risk management

New employees, consultants and contractors must receive security awareness training and
supporting documentation at the time of employment refers to:

A.

Employee orientation

B.

Confidentiality agreement

C.

Both A & B

D.

Neither A nor B