Multiple Choice
Which of the following is not true?
A) Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control.
B) Section 404 requires the explicit testing of outsourced controls.
C) The SAS 70 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls.
D) Auditors issue two types of SAS 70 reports: SAS 70 Type I report and SAS 70 Type II report.
Correct Answer:
Verified
Correct Answer:
Verified
Q7: Which organizational structure is most likely to
Q14: What is program fraud?
Q19: Explain how IT outsourcing can lead to
Q58: The PCAOB's standard No. 5 specifically requires
Q60: Briefly explain how a SSAE 16 report
Q65: The same internal control objectives apply to
Q73: For most companies,which of the following is
Q81: All of the following are recommended features
Q85: Name three forms of computer fraud.
Q121: Prior to SOX,external auditors were required to