AIS51311 C1 Review

All of the following are steps during the audit engagement planning phase, except:

• Set audit scope

• Determine audit subject

• Define audit objectives

• Establish resolution timelines

KIRITO, an IS auditor, is being tasked to perform an audit of the organization’s server administration unit. KIRITO was once the company’s server administrator before he transferred to the IT audit unit. Can the said engagement be assigned to KIRITO?

• No, KIRITO should wait for a set period of time since he came from the same unit.

• Yes, since KIRITO has familiarity with the unit and can easily identify its existing issues.

• Yes, since it is advantegeous that he already has the documents he needed for audit.

• Yes, but he need to sign a confirmation of independence.

All of the following differentiates internal audit services from external audit, except:

• Provided by a unit who are employees of the organization.

• Designed to add value and improve an organization's operations.

• Based on a formal employment contract.

• None of the choices.

The detailed audit findings portion of the audit report would most likely include all of the following, except:

• Current condition as observed

• Applicable criteria used

• Auditor’s recommendation to address the issue

• None of the choices

All of the following are objectives of an audit exit meeting, except:

• To solicit action plan, timeline, and person responsible

• To discuss and agree with the audit findings

• To help auditors set the tone of an audit, and develop rapport with the client

• None of the choices

Which of the following is the primary purpose of risk-based audit?

• Audit resources are allocated efficiently

• Material areas are addressed first

• Management concerns are prioritized

• High-impact areas are addressed first

When selecting audit procedures, an IS auditor should primarily use professional judgement to ensure that:

• Significant deficiencies will be corrected within a reasonable period

• All material weaknesses will be identified

• Audit costs will be kept at a minimum level

• All issues will be resolved prior release of the audit report

During the planning phase of an IS audit, the primary goal of an IS auditor is to:

• Collect sufficient evidence

• Define business objectives

• Specify appropriate tests

• Address the audit objectives

Which of the following represents the greatest potential risk in an electronic data interchange (EDI) environment?

• Transmission delay

• Loss or duplication of EDI transmissions

• Lack of transaction authorization

• Deletion or manipulation of transactions prior to, or after, establishment of application controls

An organization uses a bank to process its weekly payroll. Time sheets and payroll adjustment forms (e.g., hourly rate changes and terminations) are completed and delivered to the bank, which prepares the checks and reports for distribution. To best ensure payroll data accuracy:

• Payroll reports should be compared to input forms.

• Gross payroll should be recalculated manually.

• Checks should be compared to input forms.

• Checks should be reconciled with output reports.