Exam (elaborations)
CISA - Chapter 1 (2).
- Course
- Institution
CISA - Chapter 1 (2).
[Show more]
Seller
Follow
lydiaomutho
Content preview
CISA - Chapter 1Audit Charter
(P.32) - ANS-The overarching document that outlines the scope, authority, and responsibilities of
the internal audit function. (General audits)
Engagement Letter
(P.32) - ANS-The overarching document that outlines the scope, authority, and responsibilities of
the external audit function. (Focused audits)
Risk Factors
(P.33) - ANS-Factors that influence the frequency and/or impact of risk scenarios (e.g.,
reputation).
*High- damage lasting 6+ months
*Med- 3-6 months to recover
*Low- Less than 3 months to recover
General Standards
(P.36)
-ISACA Standards & Guidelines 1/3- - ANS-The guiding principles under with the IS assurance
professional operates. Conduct, ethics, independence, objectivity and due care, knowledge,
competency and skill.
Performance Standards
(P.36)
-ISACA Standards & Guidelines 2/3- - ANS-Deal with the conduct of the assignment - planning,
scoping, risk and materiality, resource mobilization, supervision and assignment management,
evidence, and the exercising of professional judgment and due care.
Reporting Standards
(P.36)
-ISACA Standards & Guidelines 3/3- - ANS-Address the types of reports, means of
communication, and the information being communicated.
Risk Analysis
(P.41) - ANS-The initial steps of risk management: analyzing the value of assets to the business,
identifying threats to those assets and evaluating how vulnerable each asset is to those threats.
, IT Risk Framework - ANS-Integrates management of IT risk into overall enterprise risk
management in order to make well informed decisions about the extent, appetite, tolerances of
risk.
Risk-Based Audit
(P.48-57) - ANS-Used to assess risks and to assist auditor in making the decision to perform
compliance/substantive testing.
ITAF
(P.40-41) - ANS-Comprehensive reference model that establishes standards by general,
performance, or reporting, and defines terms and concepts specific to IT.
Internal Controls
(P.42) - ANS-Policies, procedures, practices, and organizational structures that are implemented
to reduce risk.
Preventive Controls
(P.43) - ANS-Detect problems before they arise, monitors both operations and inputs, attempts
to predict potential problems before they occur and adjust accordingly, prevent and error,
omission, or malicious act.
Detective Controls
(P.43) - ANS-Use controls that detect and report the occurrence of an error, omission, or
malicious act.
Corrective Controls
(P.43) - ANS-Correct errors arising from a problem; modify the processing system(s) to minimize
future occurrence of problems.
IS Control Objective
(P.43) - ANS-Statements of the desired result or purpose to be achieved by implementing a
controls around IS processes.
COBIT 5
(P.44) - ANS-Framework that assists enterprises in achieving their objectives for the governance
and management of enterprise IT (GEIT).
Governance
(P.44) - ANS-Ensures that stakeholders needs, conditions, and options are evaluated to
determine balanced, agreed-on enterprise objectives to be achieve
Operational Controls
(P.45) - ANS-Controls around day to day operations; to ensure that all objectives are achieved
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller lydiaomutho. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
78998 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now