Exam 10: The impact of information technology on the audit process

Auditing around the computer is acceptable if the auditor has access to sufficient source documents and a detailed listing of output in a readable form.

One common use of generalised audit software is to help the auditor identify weaknesses in the client's IT control procedures.

Discuss the advantages and benefits of using generalised audit software.

The use of 'encryption' techniques protects the security of electronic communication during the data:

Which of the following is a control that relates to all parts of the IT system?

Systems development, operations and data control, and librarianship are separated in an IT system.

Discuss what is meant by the term 'auditing through the computer'.

Program-oriented CAATs are useful primarily for:

Describe the method used to reduce unauthorised exposures by external parties in e-commerce systems.

Discuss the circumstances that may exist in a 'network environment' which may challenge traditional general CIS controls.

Companies decide whether to outsource IT based on auditor judgement.

The perceived importance of IT within an organisation is often dictated by the attitude of the audit committee.

Provide five examples of different IT environments the auditor may encounter.

When the auditor decides to audit around the computer, he or she is not required to test the client's IT controls.

Which of the following type of risks is mitigated by strong general controls?

When auditing a computerised system, an auditor may use the test data approach as an audit tool.This technique:

Data Corporation has just completely computerised its billing and accounts receivable record-keeping.Your firm has recently acquired IDEA software, and you want to make maximum use of the computer in your audit of Data Corporation.Which of the following audit techniques could NOT be performed using generalised audit software?

Which of the following is NOT a general control?

Which one of the following is NOT a general control?

When the client uses a computer but the auditor chooses to use only the non-IT segment of internal control to assess control risk, it is referred to as 'auditing around the computer'.Which one of the following conditions need NOT be present in order to audit around the computer?