A1-1: The internal audit department has written some scripts that are used for continuous auditing of some information systems. The IT department has asked for copies of the script so that they can use them for setting up a continuous monitoring process on key systems. Would sharing these with IT a...
ACC 516 Exam 1 - Ch.1 CISA Questions
Solved 100%
A1-1: The internal audit department has written some scripts that are used for
continuous auditing of some information systems. The IT department has asked for
copies of the script so that they can use them for setting up a continuous monitoring
process on key systems. Would sharing these with IT affect the ability of the IS
auditors to independently and objectively audit the IT function? - ANSWERC.
Sharing the scripts is permissible as long as IT recognizes that audits still may still
be conducted in areas not covered by the scripts.
A1-3: An IS auditor is developing and audit plan for an environment that includes
new systems. The company's management wants the IS auditor to focus on recently
implemented systems. How should the IS auditor respond? - ANSWERC. Determine
the highest risk systems and plan accordingly.
A1-4: An IS auditor revising security controls for a critical web based system prior to
implementation. The results of the of the penetration test of are inconclusive, and the
results will not be finalized prior to implementation. Which of the following is the
BEST option for the IS auditor? - ANSWERA. Publish a report based on the
available information, highlighting the potential security weakness and the
requirement for follow-up audit testing.
A1-2: Which of the following is the BEST factor for determining the required extent of
data collection during the planning phase of an IS compliance audit? - ANSWERC.
Purpose, objective and scope of the audit
A1-9: For a retail business with a large volume of transactions, which of the following
audit techniques is the MOST appropriate for addressing emerging risk? -
ANSWERD. Continuous auditing
A1-10: An IS auditor is reviewing access to an application to determine whether
recently added accounts were appropriately authorized. This is an example of: -
ANSWERC. Compliance Testing
A1-5: An IS auditor is verifying IT policies and found that some of the policies have
not been approved by management (as required by policy), but the employees
strictly follow the policies. What should the IS auditor do first? - ANSWERD. Report
the absence of document approval
A1-6: An IS auditor found that the enterprise architecture (EA) recently adopted by
an organization has an adequate current-state representation. However, the
organization has started a separate project to develop a future-state representation.
The IS auditor should: - ANSWERB. Report this issue as a finding in the audit report
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller papersbyjol. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for £10.87. You're not tied to anything after your purchase.
