What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?

exams IIA-CIA-Part1 V3 IIA-CIA-Part1 exam 0 Comments

What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?
A . Develop preventive and detective controls
B . Identify potential fraud scenarios
C . Assess the impact and likelihood of fraud risks
D . Determine fraud risk responses

Answer: B