The primary objective of risk-based auditing is to assess the:
The primary objective of risk-based auditing is to assess the:
The primary objective of risk-based auditing is to assess the adequacy of controls. This involves evaluating whether the existing controls are suitable and sufficient to mitigate identified risks. It is not just about whether the controls are present (economy) or if they are being followed (compliance) but rather if they are effectively designed to manage risks.
efficency is part of adequacy. Adequacy means policy is there. Efectiveness means how policy is implemented
why C is correct. Why not D.
Are controls adapted to risks and do they make it possible to control them (adequacy)? Are the objectives related to implementation of controls being met (effectiveness)? We also consider the cost/benefit concept of controls when we analyze efficiency.
Why not B?