Which of the following statements is false regarding the nature, timing, and extent of risk responses? a. the nature of risk response refers to the types of audit procedures applied given the nature of the account balance and the most relevant assertions regarding that account balance. b. the timing of risk response refers to when audit procedures are conducted and whether those procedures are conducted at announced or predictable times. c. when the risk of material misstatement is low, the auditor conducts the audit procedures closer to year end, on an unannounced basis, and includes some element of unpredictability in the timing of procedures. d. the extent of risk response refers to the sufficiency of evidence that is necessary given the client's assessed risks, materiality, and the acceptable level of audit risk

Problem 3: access control pokeygram, a cutting-edge new email start-up, is setting up building access for its employees. there are two types of employees: managers and engineers, and there are three departments: security, networking, and human resoures. each employee works in a single department, and each department is housed on a different floor. managers are allowed access to any floor, while engineers are allowed access only to their own floor. there are three badge-operated elevators, each going up to only one distinct floor. every employee has one badge. pokeygram wants to use the best possible access control method in order to minimize delay for the elevators (a) access control matrix, 1. which of the following would you recommend that pokeygram use: (b) access control lists, or (c) capabilities? make sure to justify your answer. 2. what, if any, would be the benefits (and/or disadvantages) of using rbac (role-based access control) in this situation? keep your solution for this problem limited to 10-12 lines of text.