Audit associate at Hartwell and Achebe LLP
About 70 minutes. Included in Plus.
Twelve expense claims sit in your sample. Test each against the client's policy, tell control deviations from misstatements, query the client without accusing anyone, and project what you found to the whole year.
Skills: Test transactions against a client policy, attribute by attribute; Tell a control deviation from a misstatement; Query a client for evidence without accusing anyone; Project sample errors and compare them with audit thresholds
IT service desk analyst at Pellworth Housing
About 50 minutes. Included in Plus.
Seven requests are waiting on a Monday morning. Score and order the queue, report a possible account takeover with the facts security needs, and handle a new starter's access request without copying another person's access.
Skills: Score and order a service desk queue by impact and urgency; Refuse an account change that fails the identity check; Report a suspected account compromise with the facts security needs; Request access by least privilege through the data owner
Security risk and compliance manager at Brackenfield Retail Group
About 80 minutes. Included in Plus.
Marketing wants a fast growing analytics vendor live before Black Friday, and it wants 1.2 million customers' names, emails and card digits. Assess the vendor's evidence, score the risk, design the controls that would make an exception acceptable, and keep the gate shut when the vendor reveals an old incident.
Skills: Assess vendor controls on evidence, not answers; Score third-party risk by a defined method; Design compensating controls that change the risk; Route a risk decision to the right approver; Hold a security gate under commercial pressure