Assume an unauthorized company employee accesses the company’s customer list (a material intangible asset to the company), downloads it, and then converts that customer list into cash by selling it on the dark web to an anonymous buyer who ends up being a direct competitor. This scheme most accurately describes which of the following categories of fraud?

According to the 2024 Report to the Nations published by the Association of Certified Fraud Examiners (ACFE) and discussed during class, organizations without hotlines or hotline-related training have a median fraud loss amount that is [times] the median fraud loss amount of organizations with hotlines and hotline-related training.

An unauthorized set of programming instructions to increase a software developers pay rate by 10% is hidden inside an authorized program.  Once certain conditions are met, the instructions activate and update the payroll file with the pay raise increase.  What type of malware is this computer fraud technique using?

You have recently been promoted to the Senior Associate level within your public accounting firm and now have the responsibility to review staff accountant working papers.  A staff accountant has just documented your client’s change management processes and asks for your review.  Which of the following statements in the working paper are you going to need to follow-up on because it is false?

Which of the following organizations developed the COBIT framework and is responsible for keeping it updated?

You have recently been promoted to the Senior Associate level within your public accounting firm and now have the responsibility to review staff accountant working papers.  A staff accountant has just documented your client’s change management processes and asks for your review.  Which of the following statements in the working paper are you going to need to follow-up on because it is false?

Which of the following sections of a SOC 1 Type 2 report includes the complementary subservice organization controls and the complementary user entity controls written by the service organization.  

A company makes full backups every Friday night and partial backups on Mondays, Tuesdays, Wednesdays, and Thursdays.  Based on that backup schedule, which of the following statements is true?

A company makes full backups every Friday night and partial backups on Mondays, Tuesdays, Wednesdays, and Thursdays.  Based on that backup schedule, which of the following statements is true?

Which of the following was not one of the principles used when developing the COBIT framework?