Information Systems Auditing

1. Which of the following is not required to detect and report an error, omission or

malicious act?

• [A] Clear understanding of lawful activities

• [B] Established mechanism for referring unlawful activities to the appropriate person

  or group

• [C] Interaction with preventive control to ensure that detected acts are prevented

  from reoccurring

• [D] Provision of necessary controls to counter or checkmate possible threats

• [E]

  Surprised checks by supervisors

2. A key component of System Implementation Controls is acceptance testing. This test

verifies the following EXCEPT____________

• [A] the user requirement specifications have been met

• [B] end user operational documentation is accurate, comprehensive, and usable

• [C] help Desk and other ancillary support functions operate correctly as expected

• [D] back-up and recovery procedures work effectively

• [E] None of the above

3. The following are true about risk management EXCEPT_____________

• [A] Identifying and assessing a risk

• [B] Taking steps to reduce a risk to an acceptable level

• [C] Risk management is a

  management’s responsibilty

• [D] Risk management is NOT a management’s responsibilty

• [E]

  Risk management allows the organisation to achieve gain

4. Which of the following is NOT a type of risk?

• [A] an inherent risk

• [B] a control risk

• [C] a detection risk

• [D] an audit risk

• [E] an efficient risk

5. The following define(s) auditing ______________

• [A] The review past history

• [B] An examination of records in relation to transactions that they represent

• [C] Summarizing organiztional asset

• [D] All the above

• [E] [A] and [B]

6. An auditor is responsible to primary stakeholders while having regard to the interest

of the wider public. This statement describes____________

• [A] Objectivity principle of auditing

• [B] Independence principle of auditing

• [C] Accountability principle of auditing

• [D] all the above

• [E] [A] and [B]

7. Audit concepts are catigorized in relation to _____________

• [A] Auditors credibility

• [B] Auditor’s work performance

• [C] Audit evidence

• [D] all the above

• [E] [A] and [B]

8. Changing times forces new regulations demanding businesses to __________

• [A] Possess evidence of business integrity

• [B] Posses evidence of internal controls to protect data

• [C] Change evidence of registration with professional bodies

• [D] All the above

• [E] [A] and [B]

9. UKZN has appointed a goup of auditors to verify students’ fee records. The auditors

have requested for a document from the university’s management which they can

use as reference to verify compliance with relevant university policies. The document

that the auditors have requested is likely to be_____________

• [A] a policy document

• [B] Standards document

• [C] a set of guidelines

• [D] all of the above

• [E] [A] and [B]

10. An internal auditor can be______________

• [A] a Certified Internal Auditor

• [B] a Certified Information Systems Auditor

• [C] a Certified Information Controls Auditor

• [D] all the above

• [E] [A] and [B]