Exam 7: Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

The ______________________________ framework suggests that organizations and auditors should continue to use COSO as a basis for internal control.

A logic bomb is a computer abuse technique in which unauthorized code is inserted in a program,which,when activated,may cause a disaster such as shutting down a system or destroying data.

______________________________ is a process-effected by an entity's board of directors,management,and other personnel-designed to provide reasonable assurance regarding the achievement of objectives such as: effectiveness and efficiency of operations,reliability of reporting,and compliance with applicable laws and regulations.

______________________________ is software designed specifically to damage or disrupt computer systems.

______________________________ is a process by which organizations select objectives,establish processes to achieve objectives,and monitor performance.

The section of Sarbanes Oxley that sets forth criminal penalties applicable to CEOs and CFOs of up to $5 million and up to 20 years imprisonment if they knowingly or willfully certify false or misleading periodic reports is ______________________________.

Organizational governance is a process by which organizations select objectives,establish processes to achieve objectives,and monitor performance.

A deliberate act or untruth intended to obtain unfair or unlawful gain is a(n):

Controls that stop problems from occurring are called:

Assuring that cash collections recorded in the cash receipts event data are credited to the right customer in the accounts receivable master data addresses the control goal of:

The section of Sarbanes Oxley that requires a company's CEO and CFO to certify quarterly and annual reports is:

COSO's ______________________________ sets the tone of the organization,influencing the control consciousness of its people.

A computer abuse technique called a ____ involves inserting unauthorized code in a program,which,when activated,may cause a disaster,such as shutting the system down or destroying files.

A control goal that is a measure of success in meeting a set of established goals is called:

Salami slicing is program code that can attach itself to other programs (i.e. ,"infect" those programs),that can reproduce itself,and that operates to alter the programs or to destroy data.

The control goal of ensure ______________________________ strives to prevent fictitious items from entering an information system.

The section of Sarbanes Oxley that makes it a felony to knowingly destroy,alter,or create records and or documents with the intent to impede,obstruct,or influence an ongoing or contemplated federal investigation and offers legal protection to whistle blowers is:

The business process objectives that an internal control system is designed to achieve are:

The section of Sarbanes Oxley that requires financial analysts to properly disclose in research reports any conflicts of interest they might hold with the companies they recommend is ______________________________.

______________________________ are applied to all IT service activities.