Which of the following would be most useful for an internal auditor to obtain during the preliminary survey of an engagement on internal controls over user access management?

a. The policy for granting, modifying, and deleting user access to ensure processing requirements are clearly articulated

b. A sample of change request forms to verify whether the forms bear the required approval for the user access change

c. User access reports that were reviewed by management to ensure that access rights are appropriate for employee roles

d. A current listing of system users and an employee listing to determine whether systems users are active employees of the organization

Samples from two groups are being analyzed. Thirty percent of the samples are collected from Group A, and the other 70 percent are from Group B. The samples in group A have a 10 percent error rate, and the samples in Group B have a 12 percent error rate. If one sample is selected at random, what is the probability that this sample will contain an error found in Group B?

a. 1.4 percent

b. 7.4 percent

c. 8.4 percent

d. 12 percent