Question 1

What are the three primary IT functions that must be separated?

Accepted Answer

The three primary IT functions that must

Question 2

Some systems professionals have unrestricted access to the organization's programs and data.

Accepted Answer

A) True 
 B)False

Question 3

In a computer-based information system, which of the following duties needs to be separated?

Accepted Answer

A)  program coding from program operations 
B)  program operations from program maintenance 
C)  program maintenance from program coding 
D)  all of the above duties should be separated 
A)  program coding from program operations 
B)  program operations from program maintenance 
C)  program maintenance from program coding 
D)  all of the above duties should be separated

Question 4

Which of the following is not true?

Accepted Answer

A)  Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control. 
B)  Section 404 requires the explicit testing of outsourced controls. 
C)  The SSAE 16 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls. 
D)  Auditors issue two types of SSAE 16 reports: Type I report and Type II report. 
A)  Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control. 
B)  Section 404 requires the explicit testing of outsourced controls. 
C)  The SSAE 16 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls. 
D)  Auditors issue two types of SSAE 16 reports: Type I report and Type II report.

Question 5

Why should the tasks of systems development and maintenance be segregated from operations?

Accepted Answer

The segregation of systems development (

Question 6

Explain how IT outsourcing can lead to loss of strategic advantage.

Accepted Answer

Alignment between IT strategy and busine

Question 7

To improve control and efficiency, new systems development and program maintenance should be performed by the same individual or group.

Accepted Answer

A) True 
 B)False

Question 8

Segregation of duties in the computer-based information system includes

Accepted Answer

A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator 
A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator

Question 9

Cloud computing

Accepted Answer

A)  pools resources to meet the needs of multiple client firms 
B)  allows clients to expand and contract services almost instantly 
C)  both a. and b. 
D)  neither a. not b. 
A)  pools resources to meet the needs of multiple client firms 
B)  allows clients to expand and contract services almost instantly 
C)  both a. and b. 
D)  neither a. not b.

Question 10

Compare and contrast the following disaster recovery options: empty shell, recovery operations center, and internally provided backup. Rank them from most risky to least risky, as well as most costly to least costly.

Accepted Answer

The lowest cost method is internally pro

Question 11

Describe the components of a disaster recovery plan.

Accepted Answer

Every disaster recovery plan should:
des

What are the three primary IT functions that must be separated?

Some systems professionals have unrestricted access to the organization's programs and data.

In a computer-based information system, which of the following duties needs to be separated?

Which of the following is not true?

Why should the tasks of systems development and maintenance be segregated from operations?

Explain how IT outsourcing can lead to loss of strategic advantage.

To improve control and efficiency, new systems development and program maintenance should be performed by the same individual or group.

Segregation of duties in the computer-based information system includes

Cloud computing

Compare and contrast the following disaster recovery options: empty shell, recovery operations center, and internally provided backup. Rank them from most risky to least risky, as well as most costly to least costly.

Describe the components of a disaster recovery plan.

Auditing and Internal Control

Auditing Operating Systems and Networks

Auditing Database Systems

Systems Development and Program Change Activities

Transaction Processing and Financial Reporting Systems Overview

Computer Assisted Audit Tools and Techniques

Data Structures and Caatts for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Enterprise Resource Planning Systems

Business Ethics, Fraud, and Fraud Detection

Filters

Exam 2: Auditing IT Governance Controls

What are the three primary IT functions that must be separated?

Some systems professionals have unrestricted access to the organization's programs and data.

In a computer-based information system, which of the following duties needs to be separated?

Which of the following is not true?

Why should the tasks of systems development and maintenance be segregated from operations?

Explain how IT outsourcing can lead to loss of strategic advantage.

To improve control and efficiency, new systems development and program maintenance should be performed by the same individual or group.

Segregation of duties in the computer-based information system includes

Cloud computing

Compare and contrast the following disaster recovery options: empty shell, recovery operations center, and internally provided backup. Rank them from most risky to least risky, as well as most costly to least costly.

Describe the components of a disaster recovery plan.

Auditing and Internal Control

Auditing Operating Systems and Networks

Auditing Database Systems

Systems Development and Program Change Activities

Transaction Processing and Financial Reporting Systems Overview

Computer Assisted Audit Tools and Techniques

Data Structures and Caatts for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Enterprise Resource Planning Systems

Business Ethics, Fraud, and Fraud Detection

Filters