AIS615_Chapter 10

AIS615_Chapter 10

By DR SITTI SYAMSIAR MUHARRAM

Multiple Choice

Verifying the validity of credit or debit card numbers during an online transaction is an example of _____.

• application control

• general control

• preventive control

• detective control

Multiple Choice

Which one of the following is a key principle of the COBIT 5 framework?

• ensuring an approach where governance is effectively managed

• focusing on IT operations

• distinguishing between governance and management

• aligning with other standards at a low level to create a support framework for IT governance and management

Multiple Choice

Control activities in COSO's internal control model focus on control activities that are performed at the management level.

• True

• False

Multiple Choice

____________ authorization is given to employees to handle routine transactions without special approval.

• General

• Specific

• Routine

• Delay

Multiple Choice

Risk that remains after management implements internal controls or some other response to risk is called ___________.

• inherent risk

• residual risk

• risk appetite

• projected risk

Open Ended

When you go to a movie theater, you buy a prenumbered ticket from the cashier.  This ticket is handed to another person at the entrance to the movie.  What kinds of irregularities is the theater trying to prevent? 

Open Ended

When you go to a movie theater, you buy a prenumbered ticket from the cashier.  This ticket is handed to another person at the entrance to the movie.  What controls is it using to prevent these irregularities?

Open Ended

When you go to a movie theater, you buy a prenumbered ticket from the cashier.  This ticket is handed to another person at the entrance to the movie.  What remaining risks or exposures can you identify?