What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?

exams IIA-CIA-Part1 V2 IIA-CIA-Part1 exam 0 Comments

What is an appropriate first step in an internal auditor’s fraud risk assessment to evaluate how the organization manages such risk?
A . Develop preventive and detective controls
B. Identify potential fraud scenarios
C. Assess the impact and likelihood of fraud risks
D. Determine fraud risk responses

Answer: B