Question 1

List five risks associated with IT outsourcing.

Accepted Answer

Failure to Perform,Vendor Expl

Question 2

A database administrator is responsible for the receipt,storage,retrieval,and custody of data files.

Accepted Answer

A) True 
 B)False

Question 3

Which of the following is true?

Accepted Answer

A)  Core competency theory argues that an organization should outsource specific core assets. 
B)  Core competency theory argues that an organization should focus exclusively on its core business competencies 
C)  Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific non-core assets in-house. 
A)  Core competency theory argues that an organization should outsource specific core assets. 
B)  Core competency theory argues that an organization should focus exclusively on its core business competencies 
C)  Core competency theory argues that an organization should not outsource specific commodity assets. 
D)  Core competency theory argues that an organization should retain certain specific non-core assets in-house.

Question 4

What problems may occur as a result of combining applications programming and maintenance tasks into one position?

Accepted Answer

One problem that may occur is inadequate

Question 5

Segregation of duties in the computer-based information system includes

Accepted Answer

A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator 
A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator

Question 6

A ROC usually involves two or more user organizations that buy or lease a building and remodel it into a computer site,but without the computer and peripheral equipment.

Accepted Answer

A) True 
 B)False

Question 7

All of the following are control risks associated with the distributed data processing structure except

Accepted Answer

A)  lack of separation of duties 
B)  system incompatibilities 
C)  system interdependency 
D)  lack of documentation standards 
A)  lack of separation of duties 
B)  system incompatibilities 
C)  system interdependency 
D)  lack of documentation standards

Question 8

How is pre SOX IT governance different from post SOX IT governance?

Accepted Answer

Prior to SOX,the common practice regardi

Question 9

Which of the following is a feature of fault tolerance control?

Accepted Answer

A) interruptible power supplies 
B) RAID 
C) DDP 
D) MDP. 
A) interruptible power supplies 
B) RAID 
C) DDP 
D) MDP.

Question 10

Which of the following is NOT a control implication of distributed data processing?

Accepted Answer

A) redundancy 
B) user satisfaction 
C) incompatibility 
D) lack of standards 
A) redundancy 
B) user satisfaction 
C) incompatibility 
D) lack of standards

Question 11

Some companies separate systems analysis from programming/program maintenance.All of the following are control weaknesses that may occur with this organizational structure except

Accepted Answer

A)  systems documentation is inadequate because of pressures to begin coding a new program before documenting the current program 
B)  illegal lines of code are hidden among legitimate code and a fraud is covered up for a long period of time 
C)  a new systems analyst has difficulty in understanding the logic of the program 
D)  inadequate systems documentation is prepared because this provides a sense of job security to the programmer 
A)  systems documentation is inadequate because of pressures to begin coding a new program before documenting the current program 
B)  illegal lines of code are hidden among legitimate code and a fraud is covered up for a long period of time 
C)  a new systems analyst has difficulty in understanding the logic of the program 
D)  inadequate systems documentation is prepared because this provides a sense of job security to the programmer

Question 12

The least important item to store off-site in case of an emergency is

Accepted Answer

A)  backups of systems software 
B)  backups of application software 
C)  documentation and blank forms 
D)  results of the latest test of the disaster recovery program 
A)  backups of systems software 
B)  backups of application software 
C)  documentation and blank forms 
D)  results of the latest test of the disaster recovery program

Question 13

Explain why certain duties that are deemed incompatible in a manual system may be combined in a CBIS computer based information system environment.Give an example.

Accepted Answer

In a CBIS environment,it would be ineffi

Question 14

An advantage of a recovery operations center is that

Accepted Answer

A)  this is an inexpensive solution 
B)  the initial recovery period is very quick 
C)  the company has sole control over the administration of the center 
D)  none of the above are advantages of the recovery operations center 
A)  this is an inexpensive solution 
B)  the initial recovery period is very quick 
C)  the company has sole control over the administration of the center 
D)  none of the above are advantages of the recovery operations center

Question 15

Certain duties that are deemed incompatible in a manual system may be combined in a computer-based information system environment.

Accepted Answer

A) True 
 B)False

Question 16

Segregation of duties in the computer-based information system includes

Accepted Answer

A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator 
A)  separating the programmer from the computer operator 
B)  preventing management override 
C)  separating the inventory process from the billing process 
D)  performing independent verifications by the computer operator

Question 17

Transaction cost economics (TCE)theory suggests that firms should outsource specific non-core IT assets

Accepted Answer

A) True 
 B)False

Question 18

Explain the role of a SAS 70 report in reviewing internal controls.

Accepted Answer

SAS 70 report is the means by which an o

Question 19

The distributed data processing approach carries some control implications of which accountants should be aware.Discuss two.

Accepted Answer

Incompatibility of hardware and software

Question 20

What is an auditor looking for when testing computer center controls?

Accepted Answer

When testing computer center controls,th

List five risks associated with IT outsourcing.

A database administrator is responsible for the receipt,storage,retrieval,and custody of data files.

Which of the following is true?

What problems may occur as a result of combining applications programming and maintenance tasks into one position?

Segregation of duties in the computer-based information system includes

A ROC usually involves two or more user organizations that buy or lease a building and remodel it into a computer site,but without the computer and peripheral equipment.

All of the following are control risks associated with the distributed data processing structure except

How is pre SOX IT governance different from post SOX IT governance?

Which of the following is a feature of fault tolerance control?

Which of the following is NOT a control implication of distributed data processing?

Some companies separate systems analysis from programming/program maintenance.All of the following are control weaknesses that may occur with this organizational structure except

The least important item to store off-site in case of an emergency is

Explain why certain duties that are deemed incompatible in a manual system may be combined in a CBIS computer based information system environment.Give an example.

An advantage of a recovery operations center is that

Certain duties that are deemed incompatible in a manual system may be combined in a computer-based information system environment.

Segregation of duties in the computer-based information system includes

Transaction cost economics (TCE)theory suggests that firms should outsource specific non-core IT assets

Explain the role of a SAS 70 report in reviewing internal controls.

The distributed data processing approach carries some control implications of which accountants should be aware.Discuss two.

What is an auditor looking for when testing computer center controls?

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters

Exam 2: Auditing IT Governance Controls

List five risks associated with IT outsourcing.

A database administrator is responsible for the receipt,storage,retrieval,and custody of data files.

Which of the following is true?

What problems may occur as a result of combining applications programming and maintenance tasks into one position?

Segregation of duties in the computer-based information system includes

A ROC usually involves two or more user organizations that buy or lease a building and remodel it into a computer site,but without the computer and peripheral equipment.

All of the following are control risks associated with the distributed data processing structure except

How is pre SOX IT governance different from post SOX IT governance?

Which of the following is a feature of fault tolerance control?

Which of the following is NOT a control implication of distributed data processing?

Some companies separate systems analysis from programming/program maintenance.All of the following are control weaknesses that may occur with this organizational structure except

The least important item to store off-site in case of an emergency is

Explain why certain duties that are deemed incompatible in a manual system may be combined in a CBIS computer based information system environment.Give an example.

An advantage of a recovery operations center is that

Certain duties that are deemed incompatible in a manual system may be combined in a computer-based information system environment.

Segregation of duties in the computer-based information system includes

Transaction cost economics (TCE)theory suggests that firms should outsource specific non-core IT assets

Explain the role of a SAS 70 report in reviewing internal controls.

The distributed data processing approach carries some control implications of which accountants should be aware.Discuss two.

What is an auditor looking for when testing computer center controls?

Auditing and Internal Control

Security Part I: Auditing Operating Systems and Networks

IT Security Part II: Auditing Database Systems

Systems Development and Program Change Activities

Overview of Transaction Processing and Financial Reporting Systems

Computer-Assisted Audit Tools and Techniques

Data Structures and CAATTs for Data Extraction

Auditing the Revenue Cycle

Auditing the Expenditure Cycle

Business Ethics, Fraud, and Fraud Detection

Enterprise Resource Planning Systems

Filters