Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 238

Which of the following steps should an internal auditor take during an audit of an organization's business continuity plans?
1. Evaluate the business continuity plans for adequacy and currency.
2. Prepare a business impact analysis regarding the loss of critical business.
3. Identify key personnel who will be required to implement the plans.
4. Identify and prioritize the resources required to support critical business processes.

Answer options

• A. 1 only
• B. 2 and 4 only
• C. 1, 3, and 4 only
• D. 1, 2, 3, and 4

Correct answer: A

Explanation

The correct answer is A, as evaluating the adequacy and currency of business continuity plans is essential for an internal auditor. While preparing a business impact analysis and identifying resources and personnel is important, they are not primary steps for the auditor's role during the audit process.