The Head of IT Security has been asked to conduct a detailed forensic analysis of a suspected data breach that ted to customer credit card details being intercepted.

Which TWO of the following would be suitable objectives for such a forensic analysis?

Under the COSO Enterprise Risk Management Framework, who is responsible for risk management?

You have just been employed as a management accountant in a small business with an annual turnover of $0.5 million.

You have a wide range of duties because the business is small.

Which of the following is an ethical risk?

B, a construction company, has a policy of carrying out a post completion audit on every construction project undertaken where the value exceeds $1 million.

What is the role of the post completion audit?

W is a construction company which undertakes large projects for governments and other clients worldwide.  Following extensive tendering processes, contracts are issued for successful tenders, and projects typically take three to five years to complete. Contracts are normally fixed-price and many have considerable penalty clauses.

Which of the following would be appropriate policies and controls for W to implement?

Which of the following best describes the conflict between maximising profit and maximising shareholder wealth?

A capital investment project shows a NPV of £3,450 at a discounted rate of 8% and an NPV of £1,210 at a discounted rate of 9%.

What is the internal rate of return?

The shares of a company have a beta factor of 1.15. Therefore, which of the following must be true?

Which of the following is an ethical dilemma?

A project has been evaluated on the basis that it will cost $22 million and will have a net present value of $4.3 million The project has commenced and $5 million of the $22 million has been invested. A problem has been discovered that will cost an additional $4.5 million to rectify. The $4.5 million will be payable immediately. What is the NPV of continuing with this project?

M built a large factory last year and it has just been completed. The initial outflows on this project have a present value of $400 million and the entire project has a net present value of $30 million.

The initial phase of the project caused problems and there was an overspend of $35 million as there was unstable soil. The foundations had to be underpinned with large steel bars to ensure the building would be safe. There was no other suitable site for the project.

The construction could not be abandoned as the site would have had very little commercial value.

The Internal Audit department has been asked to carry out a post completion audit. What issues should it concentrate on?

ABC is a large supermarket chain which also has online shopping and home deliveries It has a 24/7 service which runs on a central server allowing all customers to enter new orders at any time This is a business critical service which, if not available, may lead to customers turning to alternative supermarket chains offering similar services, resulting in immediate turnover loss and possible long term customer loss.

ABC is contemplating the implementation of a hot standby facility, not only to cover for emergency disaster recovery, but also to allow for business continuity, allowing necessary maintenance and updates without service interruption.

Which of the following cybersecurity objectives is ABC concerned about in this scenario?

The Board of Directors of VCX, a state-owned electricity company, includes four executive directors the Chief Executive Officer, the Finance Director the Operation Director and the Technical Director

All of the shares in the company vest in the Office of the Minister for Energy, who is entitled to appoint two non-executive directors to the Board It has been alleged that the Minister appoints political "insiders" who have no particular knowledge of. or interest in. the electricity industry

There are three further non-executive directors

• L, who spent seven years as Chief Executive of VCX, but retired from that role two years ago,

• M, who spent several years on the Board of a state electricity company in a different country to VCX but who resigned from it before accepting the position with VCX: and

• N, who is a qualified and experienced professional accountant

In relation to best practice in respect of Corporate Governance, which of the following statements are valid? Select ALL that apply

Physical access controls can greatly enhance the security of company assets.

Select THREE methods by which physical access security can be significantly enhanced.

M, a manufacturing company, has had some problems with defects in one of the main products it produces. This product has been made by the company for many years and is very profitable. Last month it had over 300 defects reported by customers which is more than 15% of products sold. This is a reputation risk for M and is also affecting profitability.

Which of the following controls could M introduce to reduce defects and also increase profitability?

A publicly funded hospital has put various features in place in an attempt to improve strategic control and create an improved control environment.

Which TWO of the following features are most likely to meet this objective?

P has decided to invest in a new warehouse at a cost of $2,000,000. The discount rate of the project is 18% and the present value of the tax shield is £26,000.

What is the minimum acceptable Internal Rate of Return of the project?

Which of the following is an ethical dilemma?

An electricity company owns and operates a nuclear power station located ten miles from a large city. A recent and very extensive engineering examination of the power station concludes with the estimate that the probability of a major nuclear disaster within the next 20 years is 0.2%.

Which of the following best explains the relevance of quantifying the risk in that way?

Which of the following are true of interest rate swaps?

An electricity company owns and operates a nuclear power station located ten miles from a large city. A recent and very extensive engineering examination of the power station concludes with the estimate that the probability of a major nuclear disaster within the next 20 years is 0.2%.

Which of the following best explains the relevance of quantifying the risk in that way?