Exam 15: IT Controls : Sarbanes-Oxley and IT Governance

Compare and contrast the following disaster recovery options: empty shell,recovery operations center,and internally provided backup.Rank them from most risky to least risky,as well as most costly to least costly.

Segregation of duties in the computer-based information system includes

What is a disaster recovery plan? What are the key features?

The major disadvantage of an empty shell solution as a second site backup is

Name three forms of computer fraud.

The least important item to store off-site in case of an emergency is

Attestation services require all of the following except

All of the following are control risks associated with the distributed data processing structure except

A cold site backup approach is also known as

Explain how general controls impact transaction integrity and the financial reporting process.

Discuss the interrelationship of tests of controls,audit objectives,exposures,and existing controls.

Audit risk is the probability that the auditor will render an unqualified opinion on financial statements that are materially misstated.

The Sarbanes-Oxley Act contains many sections.Which sections are the focus of this chapter?

Both the SEC and the PCAOB have expressed an opinion as which internal control framework an organization should use to comply with SOX legislation.Explain.

Section 404 requires management to make a statement identifying the control framework used to conduct their assessment of internal controls.Discuss the options in selecting a control framework.

External auditors can cooperate with and use evidence gathered by internal audit departments that are organizationally independent and that report to the Audit Committee of the Board of Directors.

Which of the following is not true?

How do the tests of controls affect substantive tests?

All of the following are recommended features of a fire protection system for a computer center except

Briefly explain the core competency theory.