Exam 9: Auditing Computer-Based Informtion Systems

An audit should be planned so that the greatest amount of audit work focuses on the areas with the highest risk factors.Regarding risk factors,control risk is defined as

An expansion of a firm's operations to include production in Russia and China will have the effect of

When it is suspected that a particular application program contains unauthorized code or serious errors,a detailed analysis of the program logic may be necessary.The auditor has several types of software packages available to help in analyzing program logic.A program which identifies unexecuted program code is

There are six objectives of an AIS audit.The objective that pertains to source data being processed into some form of output is

An auditor examining a firm's accounting information system sets an embedded audit module to record all credit transactions in excess of $1,500 and store the data in an audit log.This is an example collecting audit evidence using

The __________ to auditing provides auditors with a clear understanding of possible errors and irregularities and the related risks and exposures.

Physical examination of inventory reveals discrepancies with accounting records.This is an application of which of the following five internal audit scope standards?

The Institute of Internal Auditors (IIA)has established five audit scope standards that outline the internal auditor's responsibilities.Which standard below deals with the principles of reliability and integrity?

How is a financial audit different from an information systems audit?

One type of audit that is concerned with the economical and efficient use of resources and the accomplishment of established goals and objectives corresponds to the fourth and fifth standards set forth by the IIA.This is known as a(n)__________ audit.

How and to whom does an auditor communicate the audit results?

Strong __________ controls sometimes can compensate for inadequate __________ controls.

An increase in the effectiveness of internal controls will have the effect of

Auditors have several techniques available to them to test computer-processing controls.An audit routine that flags suspicious transactions is known as

Name and briefly describe the different types of audits.

When programmers are working with program code,they often employ utilities that are also used in auditing.For example,as program code evolves,it is often the case that variables defined during the early part of development become irrelevant.The occurrences of variables that are not used by the program are found using

The purpose of __________ is to determine why,how,when,and who will perform the audit.

What are embedded audit modules?

To maintain the objectivity necessary for performing an independent evaluation function,auditors should not be involved in

When programmers are working with program code,they often employ utilities that are also used in auditing.For example,as program code evolves,it is often the case that blocks of code are superseded by other blocks of code.Blocks of code that are not executed by the program are identified by