Exam 7: Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

A major reason management must exercise control over an organization's business processes is to provide reasonable assurance that the company is in compliance with applicable laws and regulations.

A(n)______________________________ control plan is designed to discover problems that have occurred.

Failing to record a customer's order for the purchase of inventory violates the control goal of:

______________________________ are events that would have a positive impact on objectives.

The ERM framework addresses four categories of management objectives.Which category concerns high-level goals,aligned with and supporting its mission?

Which of the following is a control goal regarding master data?

The control goal of ensure ______________________________ requires that all valid objects or events are captured and entered into the computer once and only once.

Strong antifraud controls include:

A missing data field on a source document or computer screen is an example of an error that could undermine the achievement of the control goal of ensure ______________________________.

______________________________ are automated business process controls contained within computer programs.

A(n)______________________________ item is an object or event that is not authorized,never occurred,or is otherwise not genuine.

The information process control goal which relates to preventing fictitious events from being recorded is termed:

A computer crime technique called ______________________________ involves the systematic theft of very small amounts usually by rounding to the nearest cent in financial transactions such as the calculation of interest on savings accounts.

A fraud is a deliberate act or untruth intended to obtain unfair or unlawful gain.

The section of Sarbanes Oxley that provides for fines and imprisonment of up to 20 years to individuals who corruptly alter,destroy,mutilate,or conceal documents with the intent to impair the document's integrity or availability for use in an official proceeding,or to otherwise obstruct,influence or impede any official proceeding is:

COSO's ______________________________ are the policies and procedures that help ensure that management directives are carried out.

The control matrix is a computer virus that takes control of the computer's operating system for malicious purposes.

COSO's ______________________________ is the entity's identification and analysis of relevant risks to the achievement of its objectives,forming a basis for determining how the risks should be managed.

Under the Sarbanes Oxley Act of 2002,the section on Corporate Responsibility requires a company's CEO and CFO to certify quarterly and annual reports.

____ relate to a specific AIS process,such as billing or cash receipts.