According to the 2024 Report to the Nations published by the Association of Certified Fraud Examiners (ACFE) and discussed during class, organizations without hotlines or hotline-related training have a median fraud loss amount that is [times] the median fraud loss amount of organizations with hotlines and hotline-related training.

An unauthorized set of programming instructions to increase a software developers pay rate by 10% is hidden inside an authorized program.  Once certain conditions are met, the instructions activate and update the payroll file with the pay raise increase.  What type of malware is this computer fraud technique using?

You have recently been promoted to the Senior Associate level within your public accounting firm and now have the responsibility to review staff accountant working papers.  A staff accountant has just documented your client’s change management processes and asks for your review.  Which of the following statements in the working paper are you going to need to follow-up on because it is false?

Which of the following organizations developed the COBIT framework and is responsible for keeping it updated?

You have recently been promoted to the Senior Associate level within your public accounting firm and now have the responsibility to review staff accountant working papers.  A staff accountant has just documented your client’s change management processes and asks for your review.  Which of the following statements in the working paper are you going to need to follow-up on because it is false?

Which of the following sections of a SOC 1 Type 2 report includes the complementary subservice organization controls and the complementary user entity controls written by the service organization.  

A company makes full backups every Friday night and partial backups on Mondays, Tuesdays, Wednesdays, and Thursdays.  Based on that backup schedule, which of the following statements is true?

A company makes full backups every Friday night and partial backups on Mondays, Tuesdays, Wednesdays, and Thursdays.  Based on that backup schedule, which of the following statements is true?

Which of the following was not one of the principles used when developing the COBIT framework?

The audit firm of Barden and Bella (B&B) is conducting a financial statement audit which includes internal controls over financial reporting for the time period of January 1, 2023 to December 31, 2023 for one of its clients. The client outsources a material portion of its IT processing to Das Sound Machine (DSM).  As part of B&B’s procedures regarding the assessment of internal controls over financial reporting at its client, which of the following System and Organization Control (SOC) reports would be most beneficial for B&B to receive from DSM?