Exam 15: IT Controls Part I: Sarbanes-Oxley and It Governance

A qualified opinion on management's assessment of internal controls over the financial reporting system necessitates a qualified opinion on the financial statements?

All of the following are steps in an IT audit except

Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss.

How do the tests of controls affect substantive tests?

The fundamental difference between internal and external auditing is that

What is a recovery operations center? What is its purpose?

Explain the relationship between internal controls and substantive testing.

Systems development is separated from data processing activities because failure to do so

All of the following are control risks associated with the distributed data processing structure except

Explain the role of a SAS 70 report in reviewing internal controls.

What is the empty shell?

Commodity IT assets easily acquired in the marketplace and should be outsourced under the core competency theory.

What is a disaster recovery plan?

What is a mirrored data center?

What is scavenging?

Does a qualified opinion on management's assessment of internal controls over the financial reporting system necessitate a qualified opinion on the financial statements? Explain.

Explain why reduced security is an outsourcing risk.

Inherent risk

Define operational fraud.

Which of the following is not an advantage of distributed data processing?