Which statement correctly matches the auditing type to its typical focus?

• A. Internal auditing — financial processes
• B. Financial auditing — IT processes
• C. IT auditing — organizational units
• D. All of the above

Answer: (D)

Auditing types each have typical focus areas, and there can be overlap between them. Internal auditing regularly examines the control environment across processes, including financial ones, to assess governance, risk management, and compliance. So focusing on financial processes fits what internal auditors commonly evaluate, such as revenue, procurement, and payroll controls.

A financial audit centers on the accuracy and fairness of financial statements, but it also relies on the IT environment that supports financial reporting. That means IT processes and IT general controls that affect data integrity, access, and change management play a part in a financial audit, since reliable IT controls are essential for reliable financial data.

IT auditing concentrates on information systems and the control structures around them, frequently spanning organizational units to assess how different departments or business units implement and adhere to IT policies, security measures, and operational procedures.

Because each stated pairing can reflect a typical focus within its auditing discipline, all of the above statements can be considered correct.