10 10 points Which of the following duties could be performed by the same individual and not violate separation of duties? Issuing credit memos (documents indicating a reduction in the balance owed) and maintaining customer accounts Handling cash and authorizing credit memos (documents indicating a reduction in the balance owed) Handling cash and posting to customer accounts Handling cash receipts and mailing vendor payments 11 10 points Which of the following examples of fraud would be the most difficult to prevent and detect even if adequate separation of duties controls were designed and implemented? The accounts receivable clerk does not record sales invoices for friends or family so that they can receive free goods A mail room employee steals a check received from a customer and destroys any related documentation, and then the staff accountant avoids entering record of it into the system A credit manager issues credit cards to herself in the accounting office, and when the credit card balances are just under $1,000, she writes off the accounts as bad debt and issues new cards An employee puts inventory behind the dumpster while unloading a supplier's delivery truck, and then picks up the inventory later in the day and takes it home 12 10 points Which of the following statements about COVID-19 and the 2004 ERM framework is true? COVID-19 would not be an appropriate example of an event under Event Identification For the four types of objectives under Objective Setting, an event like COVID-19 probably affects Operations objectives disproportionately more than the other three types OOOO Although a firm should evaluate a catastrophic event, such as COVID-19, that event can never be said to affect a firm's strategy and achievement of objectives Regardless of a company's preparation or lack thereof for an event like COVID-19, if a company decides to not adjust to the threat, it would be considered risk averse 13 10 points Nuno Canavarro wants to protect sensitive information that he plans on emailing to his client. Which of the following data techniques should he use to best accomplish this? Two-factor authentication Firewall 0000 Intrusion detection system (IDS) Data encryption