Question 1

Although IT governance is a broad area, only three of them are discussed in the chapter. Name them and explain why these topics were chosen.

Accepted Answer

Although all IT governance issues are im

Question 2

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

Accepted Answer

A)  empty shell 
B)  mutual aid pact 
C)  recovery operation center 
D)  they are all equally beneficial 
A)  empty shell 
B)  mutual aid pact 
C)  recovery operation center 
D)  they are all equally beneficial

Question 3

Which of the following is NOT an example of a specific assets?

Accepted Answer

A)  application maintenance 
B)  data warehousing 
C)  highly skilled employees 
D)  server maintenance 
A)  application maintenance 
B)  data warehousing 
C)  highly skilled employees 
D)  server maintenance

Question 4

Briefly explain the core-competency theory.

Accepted Answer

Core competency theory argues that an or

Question 5

The distributed data processing approach carries some control implications of which accountants should be aware. Discuss two.

Accepted Answer

Incompatibility of hardware and software

Question 6

What is a disaster recovery plan? What are the key features?

Accepted Answer

A disaster recovery plan is a comprehens

Question 7

What is a recovery operations center? What is its purpose?

Accepted Answer

A recovery operations center (ROC) or ho

Question 8

Segregation of duties in the computer-based information system includes

Accepted Answer

A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator 
A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator

Question 9

Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss.

Accepted Answer

The characteristics of computer centers

Question 10

Virtualization is the technology that unleased cloud computing.

Accepted Answer

A) True 
 B)False

Question 11

What is a mirrored data center?

Accepted Answer

A mirrored data center duplica

Question 12

Which of the following is NOT a control implication of distributed data processing?

Accepted Answer

A)  redundancy 
B)  user satisfaction 
C)  incompatibility 
D)  lack of standards 
A)  redundancy 
B)  user satisfaction 
C)  incompatibility 
D)  lack of standards

Question 13

Which of the following is true?

Accepted Answer

A)  Core competency theory argues that an organization should outsource specific core assets. 
B)  Core competency theory argues that an organization should focus exclusively on its core business competencies 
C)  Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific noncore assets in-house. 
A)  Core competency theory argues that an organization should outsource specific core assets. 
B)  Core competency theory argues that an organization should focus exclusively on its core business competencies 
C)  Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific noncore assets in-house.

Question 14

A generally accepted advantage of IT outsourcing is improved security.

Accepted Answer

A) True 
 B)False

Question 15

What is the purpose of a data library?

Accepted Answer

A data libray is a room adjace

Question 16

What are commodity IT assets?

Accepted Answer

Commodity IT assets are not unique to a

Question 17

Some companies separate systems analysis from programming/program maintenance. All of the following are control weaknesses that may occur with this organizational structure except

Accepted Answer

A)  systems documentation is inadequate because of pressures to begin coding a new program before documenting the current program 
B)  illegal lines of code are hidden among legitimate code and a fraud is covered up for a long period of time 
C)  a new systems analyst has difficulty in understanding the logic of the program 
D)  inadequate systems documentation is prepared because this provides a sense of job security to the programmer 
A)  systems documentation is inadequate because of pressures to begin coding a new program before documenting the current program 
B)  illegal lines of code are hidden among legitimate code and a fraud is covered up for a long period of time 
C)  a new systems analyst has difficulty in understanding the logic of the program 
D)  inadequate systems documentation is prepared because this provides a sense of job security to the programmer

Question 18

RAID is the use of parallel disks that contain redundant elements of data and applications.

Accepted Answer

A) True 
 B)False

Question 19

Fault tolerance is the ability of the system to continue operation when part of the system fails due to hardware failure, application program error, or operator error.

Accepted Answer

A) True 
 B)False

Question 20

The database administrator should be separated from systems development.

Accepted Answer

A) True 
 B)False

Although IT governance is a broad area, only three of them are discussed in the chapter. Name them and explain why these topics were chosen.

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

Which of the following is NOT an example of a specific assets?

Briefly explain the core-competency theory.

The distributed data processing approach carries some control implications of which accountants should be aware. Discuss two.

What is a disaster recovery plan? What are the key features?

What is a recovery operations center? What is its purpose?

Segregation of duties in the computer-based information system includes

Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss.

Virtualization is the technology that unleased cloud computing.

What is a mirrored data center?

Which of the following is NOT a control implication of distributed data processing?

Which of the following is true?

A generally accepted advantage of IT outsourcing is improved security.

What is the purpose of a data library?

What are commodity IT assets?

Some companies separate systems analysis from programming/program maintenance. All of the following are control weaknesses that may occur with this organizational structure except

RAID is the use of parallel disks that contain redundant elements of data and applications.

Fault tolerance is the ability of the system to continue operation when part of the system fails due to hardware failure, application program error, or operator error.

The database administrator should be separated from systems development.

Auditing and Internal Control

Auditing Operating Systems and Networks

Auditing Database Systems

Systems Development and Program Change Activities

Transaction Processing and Financial Reporting Systems Overview

Computer Assisted Audit Tools and Techniques

Data Structures and Caatts for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Enterprise Resource Planning Systems

Business Ethics, Fraud, and Fraud Detection

Filters

Exam 2: Auditing IT Governance Controls

Although IT governance is a broad area, only three of them are discussed in the chapter. Name them and explain why these topics were chosen.

Which of the following disaster recovery techniques may be least optimal in the case of a disaster?

Which of the following is NOT an example of a specific assets?

Briefly explain the core-competency theory.

The distributed data processing approach carries some control implications of which accountants should be aware. Discuss two.

What is a disaster recovery plan? What are the key features?

What is a recovery operations center? What is its purpose?

Segregation of duties in the computer-based information system includes

Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss.

Virtualization is the technology that unleased cloud computing.

What is a mirrored data center?

Which of the following is NOT a control implication of distributed data processing?

Which of the following is true?

A generally accepted advantage of IT outsourcing is improved security.

What is the purpose of a data library?

What are commodity IT assets?

Some companies separate systems analysis from programming/program maintenance. All of the following are control weaknesses that may occur with this organizational structure except

RAID is the use of parallel disks that contain redundant elements of data and applications.

Fault tolerance is the ability of the system to continue operation when part of the system fails due to hardware failure, application program error, or operator error.

The database administrator should be separated from systems development.

Auditing and Internal Control

Auditing Operating Systems and Networks

Auditing Database Systems

Systems Development and Program Change Activities

Transaction Processing and Financial Reporting Systems Overview

Computer Assisted Audit Tools and Techniques

Data Structures and Caatts for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Enterprise Resource Planning Systems

Business Ethics, Fraud, and Fraud Detection

Filters