Exam 7: Controlling Information Systems: Introduction to Enterprise Risk Management and Internal Control

The control goal called efficiency of operations strives to assure that a given operations system is fulfilling the purpose(s) for which it was intended.

(True/False)

5.0/5

(39)

Question 61

A computer abuse technique called a ____ involves inserting unauthorized code in a program, which, when activated, may cause a disaster, such as shutting the system down or destroying files.

(Multiple Choice)

4.9/5

(34)

Question 62

With the issuance of the SEC Interpretative Guidance and the implementation of AS5:

(Multiple Choice)

4.9/5

(27)

Question 63

SAS No. 99 emphasizes auditors should brainstorm fraud risks, increase professional skepticism, use unpredictable audit test patterns, and detect management override of internal controls.

(True/False)

4.8/5

(37)

Question 64

A(n) ______________________________ control plan is designed to rectify problems that have occurred.

(Short Answer)

4.8/5

(46)

Question 65

The ERM framework addresses four categories of management objectives. Which category concerns high-level goals, aligned with and supporting its mission?

(Multiple Choice)

4.9/5

(36)

Question 66

A fraud is a deliberate act or untruth intended to obtain unfair or unlawful gain.

(True/False)

4.8/5

(43)

Question 67

A computer abuse technique called a back door involves a programmer's inserting special code or passwords in a computer program that will allow the programmer to bypass the security features of the program.

(True/False)

4.9/5

(31)

Question 68

______________________________ are events that would have a positive impact on objectives.

(Short Answer)

4.8/5

(39)

Question 69

A computer crime technique called worm involves the systematic theft of very small amounts from a number of bank or other financial accounts.

(True/False)

4.7/5

(28)

Question 70

Events that could have a positive impact on organizational objectives:

(Multiple Choice)

4.8/5

(41)

Question 71

Discrepancies between data items recorded by a system and the underlying economic events or objects they represent are a violation of the control goal of:

(Multiple Choice)

4.9/5

(36)

Question 72

______________________________ are applied to all IT service activities.

(Short Answer)

4.8/5

(30)

Question 73

Ensuring the security of resources is the control goal that seeks to provide protection of organization's resources from loss, destruction, disclosure, copying, sale, or other misuse of an organization's resources.

(True/False)

4.9/5

(38)

Question 74

Under the Sarbanes Oxley Act of 2002, the section on Enhanced Financial Disclosures requires each annual report filed with the SEC to include an internal control report.

(True/False)

4.9/5

(34)

Question 75

Why is there usually no control goal called update validity?

(Multiple Choice)

4.8/5

(46)

Question 76

COSO's ______________________________ is a process that assesses the quality of internal control performance over time.

(Short Answer)

4.9/5

(38)

Question 77

The ERM framework is comprised of eight components. Which component includes the policies and procedures established and implemented to help ensure the risk responses are effectively carried out?

(Multiple Choice)

4.9/5

(39)

Question 78

______________________________ are business process objectives that an internal control system is designed to achieve.

(Short Answer)

4.9/5

(39)

Question 79

A control that involves reprocessing transactions that are rejected during initial processing is an example of:

(Multiple Choice)

4.8/5

(45)

Question 80

Showing 61 - 80 of 161

The control goal called efficiency of operations strives to assure that a given operations system is fulfilling the purpose(s) for which it was intended.

A computer abuse technique called a ____ involves inserting unauthorized code in a program, which, when activated, may cause a disaster, such as shutting the system down or destroying files.

With the issuance of the SEC Interpretative Guidance and the implementation of AS5:

SAS No. 99 emphasizes auditors should brainstorm fraud risks, increase professional skepticism, use unpredictable audit test patterns, and detect management override of internal controls.

A(n) ______________________________ control plan is designed to rectify problems that have occurred.

The ERM framework addresses four categories of management objectives. Which category concerns high-level goals, aligned with and supporting its mission?

A fraud is a deliberate act or untruth intended to obtain unfair or unlawful gain.

A computer abuse technique called a back door involves a programmer's inserting special code or passwords in a computer program that will allow the programmer to bypass the security features of the program.

______________________________ are events that would have a positive impact on objectives.

A computer crime technique called worm involves the systematic theft of very small amounts from a number of bank or other financial accounts.

Events that could have a positive impact on organizational objectives:

Discrepancies between data items recorded by a system and the underlying economic events or objects they represent are a violation of the control goal of:

______________________________ are applied to all IT service activities.

Ensuring the security of resources is the control goal that seeks to provide protection of organization's resources from loss, destruction, disclosure, copying, sale, or other misuse of an organization's resources.

Under the Sarbanes Oxley Act of 2002, the section on Enhanced Financial Disclosures requires each annual report filed with the SEC to include an internal control report.

Why is there usually no control goal called update validity?

COSO's ______________________________ is a process that assesses the quality of internal control performance over time.

The ERM framework is comprised of eight components. Which component includes the policies and procedures established and implemented to help ensure the risk responses are effectively carried out?

______________________________ are business process objectives that an internal control system is designed to achieve.

A control that involves reprocessing transactions that are rejected during initial processing is an example of:

Introduction to Accounting Information Systems

Enterprise Systems

Electronic Business E-Business Systems

Documenting Information Systems

Database Management Systems

Relational Databases and SQL

Controlling Information Systems: Introduction to Pervasive Controls

Controlling Information Systems: Business Process and Application Controls

The Order Entrysales Oes Process

The Billingaccounts Receivablecash Receipts Barcr Process

The Purchasing Process

The Accounts Payablecash Disbursements Apcd Process

The Human Resources Process HR Management and Payroll Processes

Integrated Production Processes IPP

The General Ledger and Business Reporting GLBR Process

Acquiring and Implementing Accounting Information Systems

Filters