Question 1

A(n)____ is a computer abuse technique where unauthorized instructions are inserted into a program to systematically steal very small amounts,usually by rounding to the nearest cent in financial transactions.

Accepted Answer

A)   worm
B)   salami slicing
C)   logic bomb
D)   Trojan horse B

Question 2

The third level of protection in the control hierarchy is:

Accepted Answer

A)   the control environment
B)   business process control plans
C)   pervasive control plans
D)   IT general controls B

Question 3

Discrepancies between data items recorded by a system and the underlying economic events or objects they represent are a violation of the control goal of:

Accepted Answer

A)   ensure input validity
B)   ensure input completeness
C)   ensure input accuracy
D)   ensure update completeness C

Question 4

Control plans that relate to a multitude of goals and processes are called ______________________________.

Accepted Answer

The answer of Control plans that relate to a multitude...

Question 5

A(n)______________________________ is a tool designed to assist you in evaluating the potential effectiveness of controls in a business process by matching control goals with relevant control plans.

Accepted Answer

The answer of A(n)______________________________ is a tool designed to assist...

Question 6

This framework was issued in 1996 (and updated in 2007)by the Information Systems Audit and Control Association (ISACA)because of the influence of IT over information systems,financial reporting and auditing.

Accepted Answer

A)   COBIT
B)   COSO
C)   ERM
D)   All of the above.

Question 7

According to the COSO Fraudulent Financial Reporting 1998- 2007 update:

Accepted Answer

A)   The most common fraud scheme used was improper revenue recognition.
B)   Most companies engaged in fraudulent activities were able to recover and resume operations.
C)   CEO's and CFO's were named by the SEC for involvement in approximately 50% of fraud cases.
D)   All of the above.

Question 8

Which component of the ERM framework is best described here: Internal and external events affecting achievement of an entity's objectives must be identified,distinguishing between risks and opportunities.Opportunities are channeled back to management's strategy or objective-setting processes.

Accepted Answer

A)   control activities
B)   event identification
C)   risk assessment
D)   risk response

Question 9

Establishing a viable internal control system is the responsibility of ______________________________.

Accepted Answer

The answer of Establishing a viable internal control system is...

Question 10

Which of the following statements regarding a system of internal control is false?

Accepted Answer

A)   Effective internal control systems provide complete assurance against the occurrence of material frauds and embezzlements.
B)   Internal control systems depend largely on the competency and honesty of people.
C)   Because internal control systems have a cost,management should evaluate the cost/benefit of each control plan.
D)   The development of an internal control system is the responsibility of management.

Question 11

Business process control plans relate to those controls particular to a specific process or subsystem,such as billing or cash receipts.

Accepted Answer

A) True 
 B)False

Question 12

Three terms used in the chapter to refer to when a control plan is exercised are ______________________________,______________________________,and corrective control plans.

Accepted Answer

The answer of Three terms used in the chapter to...

Question 13

Below is a list of control goals followed by a list of short scenarios describing system failures (i.e. ,control goals not met)and/or instances of successful control plans (i.e. ,plans that helped to achieve control goals).
Required:
On the blank line to the left of each numbered scenario,place the capital letter of the control goal that best matches the situation described.HINT: Some letters may be used more than once.Conversely,some letters may not apply at all.

Accepted Answer

The answer of Below is a list of control goals...

Question 14

The control goal called efficiency of operations strives to assure that a given operations system is fulfilling the purpose(s)for which it was intended.

Accepted Answer

A) True 
 B)False

Question 15

The effect of an event's occurrence is:

Accepted Answer

A)   control
B)   impact
C)   risk
D)   opportunity

Question 16

The external environment is a system of integrated elements-people,structures,processes,and procedures-acting together to provide reasonable assurance that an organization achieves both its operations system and its information system goals.

Accepted Answer

A) True 
 B)False

Question 17

_____________ control plans relate to a multitude of goals and processes.

Accepted Answer

A)   Pervasive
B)   IT general
C)   Business process
D)   Preventive

Question 18

The section of Sarbanes Oxley that establishes an independent board to oversee public company audits is ______________________________.

Accepted Answer

The answer of The section of Sarbanes Oxley that establishes...

Question 19

A programming error causes the sale of an inventory item to be added to the quantity on hand attribute in the inventory master data.Which control goal was not achieved?

Accepted Answer

A)   ensure update completeness
B)   ensure input accuracy
C)   ensure update accuracy
D)   ensure input completeness

Question 20

The control goal of ensure ______________________________ provides assurance that objects or events which were entered into the computer are in reflected correctly in their respective master data.

Accepted Answer

The answer of The control goal of ensure ______________________________ provides...

Exam 7: Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

A(n) ____ is a computer abuse technique where unauthorized instructions are inserted into a program to systematically steal very small amounts,usually by rounding to the nearest cent in financial transactions.

The third level of protection in the control hierarchy is:

Discrepancies between data items recorded by a system and the underlying economic events or objects they represent are a violation of the control goal of:

Control plans that relate to a multitude of goals and processes are called ______________________________.

A(n)______________________________ is a tool designed to assist you in evaluating the potential effectiveness of controls in a business process by matching control goals with relevant control plans.

This framework was issued in 1996 (and updated in 2007) by the Information Systems Audit and Control Association (ISACA) because of the influence of IT over information systems,financial reporting and auditing.

According to the COSO Fraudulent Financial Reporting 1998- 2007 update:

Which component of the ERM framework is best described here: Internal and external events affecting achievement of an entity's objectives must be identified,distinguishing between risks and opportunities.Opportunities are channeled back to management's strategy or objective-setting processes.

Establishing a viable internal control system is the responsibility of ______________________________.

Which of the following statements regarding a system of internal control is false?

Business process control plans relate to those controls particular to a specific process or subsystem,such as billing or cash receipts.

Three terms used in the chapter to refer to when a control plan is exercised are ,,and corrective control plans.

The control goal called efficiency of operations strives to assure that a given operations system is fulfilling the purpose(s)for which it was intended.

The effect of an event's occurrence is:

The external environment is a system of integrated elements-people,structures,processes,and procedures-acting together to provide reasonable assurance that an organization achieves both its operations system and its information system goals.

_____________ control plans relate to a multitude of goals and processes.

The section of Sarbanes Oxley that establishes an independent board to oversee public company audits is ______________________________.

A programming error causes the sale of an inventory item to be added to the quantity on hand attribute in the inventory master data.Which control goal was not achieved?

The control goal of ensure ______________________________ provides assurance that objects or events which were entered into the computer are in reflected correctly in their respective master data.