When testing the operational effectiveness of an institution's customer risk rating model an auditor finds that the risk rating is not in accordance with the model specification in some cases.After interviewing developers andofficers,the auditor learns the specification document is inaccurate and has not been updated in a timely manner.Which are appropriate corrective action plans'? (Select Two.)
When sample testing client transaction records, the auditor finds that a client offered to sell a piece of art on a commission basis. A sale was completed and the purchase price was remitted to the client with less commission. What further investigation should the auditor undertake?
Which finding must be first remediated in order to understand is risks the organization is exposed to?
What should the auditor look for to assess the adequacy of controls for non-profit organizations that are vulnerable to terrorist financing (TF) abuse? (Select Two.)
A financial institution (FI) recently updated its transaction monitoring (TM) thresholds During validation which should be provided as evidence of optimized thresholds'? (Select Two.)
Which is the most significant risk associated with KYC requirements being considered a low priority not designed into processes and subsequently implemented after the products are already launched?
Which recommendation should the audit team provide to address transaction monitoring (TM) issues?
During the ongoing due diligence process the company becomes aware that the customer is holding personal assets for a politically exposed person (PEP). What should the auditor recommend to enhance the control environment for this customer relationship? (Select Three.)
Considering recent changes in the bank's correspondent banking business. Which is the most important risk indicator for the internal auditor to review?