Exam 16: Auditing It Controls Part III: Systems Development, program Changes, and Application Auditing

arrow
  • Select Tags
search iconSearch Question
flashcardsStudy Flashcards
  • Select Tags

To verify the module's internal logic,the programmer compares the actual results obtained from the test with the predetermined results.

Free
(True/False)
4.9/5
(31)
Correct Answer:
Verified

True

What are the audit's objectives relating to systems development?

Free
(Essay)
4.7/5
(40)
Correct Answer:
Verified

The auditor's objectives are to ensure that (1)systems development activities are applied consistently and in accordance with management's policies to all systems development projects; (2)the system as originally implemented was free from material errors and fraud; (3)the system was judged necessary and justified at various checkpoints throughout the SDLC; and (4)system documentation is sufficiently accurate and complete to facilitate audit and maintenance activities.

Which statement is not true?

Free
(Multiple Choice)
4.8/5
(40)
Correct Answer:
Verified

A

New system development activity controls must focus on the authorization,development,and implementation of new systems and its maintenance.List five control activities that are found in an effective system development life cycle.

(Essay)
4.9/5
(39)

Source program library controls should prevent and detect unauthorized access to application programs.

(True/False)
4.7/5
(36)

A salami fraud affects a large number of victims,but the harm to each appears to be very small.

(True/False)
5.0/5
(36)

Describe a test of controls that would provide evidence that only authorized program maintenance is occurring.

(Essay)
4.9/5
(44)

What is GAS? Identify two examples of GAS products.

(Essay)
4.9/5
(40)

What is an embedded audit module?

(Essay)
4.8/5
(40)

Describe parallel simulation.

(Essay)
4.8/5
(37)

Programs in their compiled state are highly susceptible to the threat of unauthorized modification.

(True/False)
4.9/5
(36)

Which statement is correct?

(Multiple Choice)
4.7/5
(26)

Which test is not an example of a white box test?

(Multiple Choice)
5.0/5
(43)

Meaningful test data is relatively easy to create.

(True/False)
4.9/5
(38)

Describe and contrast the test data method with the integrated test facility.

(Essay)
4.8/5
(41)

The longest period in the SDLC is the maintenance phase.

(True/False)
4.7/5
(38)

Discuss the three types of controls auditors can perform to determine that programs are free from material errors.

(Essay)
4.8/5
(37)

Users need to be actively involved in the systems development process.

(True/False)
5.0/5
(36)

Describe two tests of controls the auditor can use confirm that authorization procedures for program changes.

(Essay)
4.8/5
(39)

The black box approach to testing computer program controls is also known as auditing around the computer.

(True/False)
4.8/5
(44)
Showing 1 - 20 of 66
close modal

Filters

  • Essay(0)
  • Multiple Choice(0)
  • Short Answer(0)
  • True False(0)
  • Matching(0)