Question 1

What is a recovery operations center? What is its purpose?

Accepted Answer

A recovery operations center (ROC)or hot

Question 2

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

Accepted Answer

A) True 
 B)False

Question 3

Explain the outsourcing risk of failure to perform.

Accepted Answer

Once a client firm has outsourced specif

Question 4

What primary IT functions must be separated in a centralized firm?

Accepted Answer

separate systems development f

Question 5

All of the following are recommended features of a fire protection system for a computer center except

Accepted Answer

A)  clearly marked exits 
B)  an elaborate water sprinkler system 
C)  manual fire extinguishers in strategic locations 
D)  automatic and manual alarms in strategic locations 
A)  clearly marked exits 
B)  an elaborate water sprinkler system 
C)  manual fire extinguishers in strategic locations 
D)  automatic and manual alarms in strategic locations

Question 6

The database administrator should be separated from systems development.

Accepted Answer

A) True 
 B)False

Question 7

Briefly outline transaction cost economics as it relates to IT outsourcing.

Accepted Answer

Transaction cost economics theory is in

Question 8

To improve control and efficiency,the CBIS tasks of new systems development and program maintenance should be performed by the same individual or group.

Accepted Answer

A) True 
 B)False

Question 9

Briefly explain how a SAS 70 report is used in assessing internal controls of outsourced facilities.

Accepted Answer

The internal controls over the outsource

Question 10

An advantage of distributed data processing is that individual end user groups set specific IT standards without concern for the broader corporate needs.

Accepted Answer

A) True 
 B)False

Question 11

What is a disaster recovery plan? What are the key features?

Accepted Answer

A disaster recovery plan is a comprehens

Question 12

Explain why certain duties that are deemed incompatible in a manual system may be combined in an automated environment? Give an example.

Accepted Answer

In an automated environment it would be

Question 13

Describe the components of a disaster recovery plan.

Accepted Answer

Every disaster recovery plan should:
des

Question 14

Describe two tests that an auditor would perform to ensure that the disaster recovery plan is adequate.

Accepted Answer

review second site backup plan,critical

Question 15

Compare and contrast the following disaster recovery options: empty shell,recovery operations center,and internally provided backup.Rank them from most risky to least risky,as well as most costly to least costly.

Accepted Answer

The lowest cost method is internally pro

Question 16

The following are examples of commodity assets except

Accepted Answer

A)  network management 
B)  systems operations 
C)  systems development 
D)  server maintenance 
A)  network management 
B)  systems operations 
C)  systems development 
D)  server maintenance

Question 17

To fulfill the segregation of duties control objective,computer processing functions (like authorization of credit and billing)are separated.

Accepted Answer

A) True 
 B)False

Question 18

A disadvantage of distributed data processing is

Accepted Answer

A) the increased time between job request and job completion. 
B) the potential for hardware and software incompatibility among users. 
C) the disruption caused when the mainframe goes down. 
D) that users are not likely to be involved. 
A) the increased time between job request and job completion. 
B) the potential for hardware and software incompatibility among users. 
C) the disruption caused when the mainframe goes down. 
D) that users are not likely to be involved.

Question 19

Which of the following is not true?

Accepted Answer

A)  Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control. 
B)  section 404 requires the explicit testing of outsourced controls. 
C)  The SAS 70 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls. 
D)  Auditors issue two types of SAS 70 reports: SAS 70 Type I report and SAS 70 Type II report. 
A)  Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control. 
B)  section 404 requires the explicit testing of outsourced controls. 
C)  The SAS 70 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls. 
D)  Auditors issue two types of SAS 70 reports: SAS 70 Type I report and SAS 70 Type II report.

Question 20

Describe how a Corporate Computer Services Function can overcome some of the problems associated with distributed data processing.

Accepted Answer

The Corporate Computer Services Function

What is a recovery operations center? What is its purpose?

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

Explain the outsourcing risk of failure to perform.

What primary IT functions must be separated in a centralized firm?

All of the following are recommended features of a fire protection system for a computer center except

The database administrator should be separated from systems development.

Briefly outline transaction cost economics as it relates to IT outsourcing.

To improve control and efficiency,the CBIS tasks of new systems development and program maintenance should be performed by the same individual or group.

Briefly explain how a SAS 70 report is used in assessing internal controls of outsourced facilities.

An advantage of distributed data processing is that individual end user groups set specific IT standards without concern for the broader corporate needs.

What is a disaster recovery plan? What are the key features?

Explain why certain duties that are deemed incompatible in a manual system may be combined in an automated environment? Give an example.

Describe the components of a disaster recovery plan.

Describe two tests that an auditor would perform to ensure that the disaster recovery plan is adequate.

Compare and contrast the following disaster recovery options: empty shell,recovery operations center,and internally provided backup.Rank them from most risky to least risky,as well as most costly to least costly.

The following are examples of commodity assets except

To fulfill the segregation of duties control objective,computer processing functions (like authorization of credit and billing)are separated.

A disadvantage of distributed data processing is

Which of the following is not true?

Describe how a Corporate Computer Services Function can overcome some of the problems associated with distributed data processing.

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters

Exam 2: Auditing IT Governance Controls

What is a recovery operations center? What is its purpose?

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

Explain the outsourcing risk of failure to perform.

What primary IT functions must be separated in a centralized firm?

All of the following are recommended features of a fire protection system for a computer center except

The database administrator should be separated from systems development.

Briefly outline transaction cost economics as it relates to IT outsourcing.

To improve control and efficiency,the CBIS tasks of new systems development and program maintenance should be performed by the same individual or group.

Briefly explain how a SAS 70 report is used in assessing internal controls of outsourced facilities.

An advantage of distributed data processing is that individual end user groups set specific IT standards without concern for the broader corporate needs.

What is a disaster recovery plan? What are the key features?

Explain why certain duties that are deemed incompatible in a manual system may be combined in an automated environment? Give an example.

Describe the components of a disaster recovery plan.

Describe two tests that an auditor would perform to ensure that the disaster recovery plan is adequate.

Compare and contrast the following disaster recovery options: empty shell,recovery operations center,and internally provided backup.Rank them from most risky to least risky,as well as most costly to least costly.

The following are examples of commodity assets except

To fulfill the segregation of duties control objective,computer processing functions (like authorization of credit and billing)are separated.

A disadvantage of distributed data processing is

Which of the following is not true?

Describe how a Corporate Computer Services Function can overcome some of the problems associated with distributed data processing.

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters