Valid IIA-CIA-Part1 Dumps shared by ExamDiscuss.com for Helping Passing IIA-CIA-Part1 Exam! ExamDiscuss.com now offer the newest IIA-CIA-Part1 exam dumps, the ExamDiscuss.com IIA-CIA-Part1 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com IIA-CIA-Part1 dumps with Test Engine here:
An internal auditor performed a risk assessment and concluded that the controls over access privileges to a bank account were appropriate. Later, the auditor learned that a contractor was using a shared password provided by an authorized user of the account. Which of the following statements best describes the auditor's application of due professional care?
Correct Answer: C
Due professional care was not exercised because the residual risk from the possibility of authorized users sharing their passwords was not considered. Identifying and assessing risks associated with shared access and improper handling of credentials is crucial in a risk assessment. The failure to consider such risks indicates a lack of thoroughness in the auditor's evaluation of control effectiveness.References: IIA Standard 1300: Quality Assurance and Improvement Program