AIS51312 C1 Review

Who should review and approve system deliverables as they are defined and accomplished, to ensure the successful completion and implementation of a new business system application?

• Project steering committee

• Senior management

• User management

• Quality assurance staff

Which of the following BEST helps to prioritize project activities and determine the timeline for a project?

• A Gantt chart

• Earned value analysis

• Program evaluation review technique

• Function point analysis

An IS auditor reviewing a series of completed projects finds that the implemented functionality often exceeded requirements and most of the projects ran significantly over budget. Which of these areas of the organization’s project management process is the MOST likely cause of this issue?

• Project scope management

• Project time management

• Project risk management

• Project procurement management

An IS auditor is reviewing the software development process for an organization. Which of the following functions are appropriate for the end users to perform?

• System configuration

• Program output testing

• Program logic specification

• Performance tuning

An IS auditor is reviewing system development for a health care organization with two application environments— production and test. During an interview, the auditor notes that production data are used in the test environment to test program changes. What is the MOST significant potential risk from this situation?

• The test environment may not have adequate controls to ensure data accuracy.

• The test environment may produce inaccurate results due to use of production data.

• Hardware in the test environment may not be identical to the production environment..

• The test environment may not have adequate access controls implemented to ensure data confidentiality..

The IS auditor is reviewing a recently completed conversion to a new enterprise resource planning system. In the final stage of the conversion process, the organization ran the old and new systems in parallel for 30 days before allowing the new system to run on its own. What is the MOST significant advantage to the organization by using this strategy?

• Significant cost savings over other testing approaches

• Assurance that new, faster hardware is compatible with the new system

• Assurance that the new system meets functional requirements

• Increased resiliency during the parallel processing time

An organization is replacing a payroll program that it developed in-house, with the relevant subsystem of a commercial enterprise resource planning (ERP)system. Which of the following would represent the HIGHEST potential risk?

• Undocumented approval of some project changes

• Faulty migration of historical data from the old system to the new system

• Incomplete testing of the standard functionality of the ERP subsystem

• Duplication of existing payroll permissions on the new ERP subsystem

Due to a reorganization, a business application system will be extended to other departments. Which of the following should be of the GREATEST concern for an IS auditor?

• Process owners have not been identified.

• The billing cost allocation method has not been determined.

• Multiple application owners exist.

• A training program does not exist.

When auditing the proposed acquisition of a new computer system, an IS auditor should FIRST ensure that:

• A clear business case has been approved by management.

• Corporate security standards will be met.

• Users will be involved in the implementation plan.

• The new system will meet all required user functionality.

Which of the following types of risk is MOST likely encountered in a software as a service environment?

• Noncompliance with software license agreements

• Performance issues due to Internet delivery method

• Higher cost due to software licensing requirements

• Higher cost due to the need to update to compatible hardware