Exam 17: IT Controls Part III: Systems Development, program Changes, and Application Controls

Auditors do not rely on detailed knowledge of the application's internal logic when they use the __________________________ approach to auditing computer applications.

Describe two tests of controls the auditor can use confirm that authorization procedures for program changes.

Routine maintenance activities require all of the following controls except

Which test is not an example of a white box test?

To meet the governance-related expectations of management under SOX,an organization's internal audit department needs to be

What is ITF?

Which of the following statements is NOT true?

Source program library controls should prevent and detect unauthorized access to application programs.

Which test of controls will provide evidence that the system as originally implemented was free from material errors and free from fraud? Review of the documentation indicates that

When analyzing the results of the test data method,the auditor would spend the least amount of time reviewing

The black box approach to testing computer applications allows the auditor to explicitly review program logic.

Which statement is not true? Embedded audit modules

When auditors do not rely on a detailed knowledge of the application's internal logic,they are performing

The longest period in the SDLC is the maintenance phase.

All of the following are advantages of the test data technique except

Which control is not a part of the source program library management system?

All of the following are disadvantages of the test data technique except

All program modules must be thoroughly tested before they are implemented.

Program testing

All of the following statements are true about the integrated test facility (ITF)except