It Auditing Essay Example
1. An audit charter should:
A. be dynamic and change often to coincide with the changing nature of technology and the audit profession.
B. clearly state audit objectives for, and the delegation of, authority to the maintenance and review of internal controls.
C. document the audit procedures designed to achieve the planned audit objectives.
D. Outline the overall authority, scope and responsibilities of the audit function. Answer:_____D______________________
2. Which of the following criteria for selecting the applications to be audited is LEAST likely to be used?
A. Materiality of audit risk
B. Sensitivity of transactions
C. Technological complexity
D. Regulatory agency involvement
Answer: _________C__________________
3. Which of the following is the MOST likely reason why e-mail systems have become a useful source of evidence for litigation?
A. Multiple cycles of backup files remain available
B. Access controls establish accountability for e-mail activity
C. Data classification regulates what information should be communicated via e-mail
D. Within the enterprise, a clear policy for using e-mail ensures that evidence is available
Answer:______A_____________________
4. While planning an audit, an assessment of risk should be made to provide:
NAME: ______________________________________
A. Reasonable assurance that the audit will cover material items.
B. Definite assurance that material items will be covered during the audit work.
C. Reasonable assurance that all items will be covered by the audit.
D. Sufficient assurance that all items will be covered during the audit work.
Answer:______A_____________________
5. When evaluating the collective effect of preventive, detective or corrective controls within a process, an IS auditor should be aware of which of the following?
A. The point at which controls are exercised as data flow through the system
B. Only preventive and detective controls are relevant
C.
A. be dynamic and change often to coincide with the changing nature of technology and the audit profession.
B. clearly state audit objectives for, and the delegation of, authority to the maintenance and review of internal controls.
C. document the audit procedures designed to achieve the planned audit objectives.
D. Outline the overall authority, scope and responsibilities of the audit function. Answer:_____D______________________
2. Which of the following criteria for selecting the applications to be audited is LEAST likely to be used?
A. Materiality of audit risk
B. Sensitivity of transactions
C. Technological complexity
D. Regulatory agency involvement
Answer: _________C__________________
3. Which of the following is the MOST likely reason why e-mail systems have become a useful source of evidence for litigation?
A. Multiple cycles of backup files remain available
B. Access controls establish accountability for e-mail activity
C. Data classification regulates what information should be communicated via e-mail
D. Within the enterprise, a clear policy for using e-mail ensures that evidence is available
Answer:______A_____________________
4. While planning an audit, an assessment of risk should be made to provide:
NAME: ______________________________________
A. Reasonable assurance that the audit will cover material items.
B. Definite assurance that material items will be covered during the audit work.
C. Reasonable assurance that all items will be covered by the audit.
D. Sufficient assurance that all items will be covered during the audit work.
Answer:______A_____________________
5. When evaluating the collective effect of preventive, detective or corrective controls within a process, an IS auditor should be aware of which of the following?
A. The point at which controls are exercised as data flow through the system
B. Only preventive and detective controls are relevant
C.