WorksheetsLesson 2 - IT Audit
Total questions: 23
Worksheet time: 55mins
Statement 1: Spreadsheets or database software may be used as an audit planning tool to develop an audit universe.
Statement 2: Spreadsheets or database software may also be used for risk assessment and preparation of audit schedules.
Statement 1 is correct.
Statement 2 is correct.
Both statements are correct.
Both statements are incorrect.
Statement 1: Data sharing and communication of audit procedures and results between auditors of the same team are made possible with the use of word processing, spreadsheet and presentation tools, among others.
Statement 2: Electronic connectivity not only allows auditors to communicate but also provides access for audit clients to exchange information.
Statement 1 is correct.
Statement 2 is correct.
Both statements are correct.
Both statements are incorrect.
Statement 1: An advantage of having a central data repository for auditors is that it enables the saving and availability of past audit planning and documentation procedures such as risk assessment, audit schedules and budget data.
Statement 2: Database applications allows consolidation of data that can be used for future decision making by top management, for example analysis of audit budget vs actual, trend reports, etc.
Statement 1 is correct.
Statement 2 is correct.
Both statements are correct.
Both statements are incorrect.
Use of generalized audit software makes it possible to perform required functions directly on application files. Audit softwares can be used to:
1. Analyze and compare files
2. Conduct random samples
3. Prepare confirmation letters
4. Validation computations
5. Select specific records for examination
1,2,3 and 4
1,2,3 and 5
1,3,4, and 5
2,3,4 and 5
1,2,3, 4 and 5
Statement 1: Information systems auditor cannot help determine compliance with a particular procedure for operational and financial auditors.
Statement 2: When an information systems auditor reviews the spreadsheets to understand the flow of a process and whether it provides a correct output from the input, (s)he needs to check the accuracy of formulas used.
Statement 1 is correct.
Statement 2 is correct.
Both statements are correct.
Both statements are incorrect.
Auditors use spreadsheets for analyzing data and forming opinions. Spreadsheets are even used or relied on by management for decision making. Which is not a risk that is associated with poor spreadsheet design?
Lack of reliability
Lack of auditability
Lack of modifiability
Lack of users
This is a built-in test environment within a system that allows testing of the process for accuracy or reliability.
Integrated test facility
Parallel simulation
Transaction tagging
Test data
The following are problem areas in a processing cycle that an audit staff needs to identify:
1. Redundant processing of data
2. Bottlenecks that delay processing
3. Points in the operating cycle where there is lack of review of output reports
1, 2 and 3
1 and 2 only
1 and 3 only
2 and 3 only
This type of sampling is used when the basis of sampling technique is the auditor’s experience, for example the sample will be pulled out from a particular region or function.
Random attribute sampling
Audit sampling
Judgmental sampling
Statistical sampling
This is a CAAT that can assist IT auditors in evaluating the usability of a web site.
Webtoon
Webmatrix
Webmetrics
Webinar
The following, except for one are elements of an effective career development plan. Which is not an element?
Counseling and feedback
Demotions and demerits
Training
Career path planning
Professional development
The following is an example of a career path for an IT auditor. Find the correct sequence.
1. Senior IT auditor
2. IT audit manager
3. Director of IT audit
4. IT audit staff
5. IT audit trainee
5,4,2,1,3
4,5,2,1,3
5,4,1,3,2
5,4,1,2,3
4,5,1,2,3
This refers to all training, certification and education that a worker needs to succeed in his or her career.
Counseling and feedback
Performance assessment
Training
Career path planning
Professional development
Which is not true about evaluating IT audit performance?
Evaluating IT audits is an on-going process to ensure audit quality.
In evaluating audit performance, the managers must be concerned with high scores or high performance.
On the basis of evaluation, managers should develop training plans to improve the IT audit methodologies.
There should be conducted a training for the staff in proper use of audit techniques and tools.
____________ is an integral part of the audit function because it supports the auditor’s judgment on the quality of computer system.
Internal audit
Compliance audit
Financial audit
IT audit
External audit
The following are types of IT audits.
1. Organizational IT audit
2. Technical IT audit
3. Application IT audit
4. Compliance IT audit
1,2,3,4
1,2,3
2,3,4
1,3,4
1,2,4
____________ is defined as information integrity, the level of confidence and trust that can be placed on the information, and service availability.
Information system audit
Information assurance
Information security
IT infrastructure
If CPA is for accountancy graduates, what is the certification applicable to IT auditors?
CIA
CISA
CFE
CMA
This is an area of work or career opportunity where the focus of work is on advising organizations on how to best use information technology in achieving their business objectives.
Public accounting
Private industry
Management consultancy
Academe
Effective IT governance can improve organizational performance by
1. Ensuring decisions and investments are aligned with organizational objectives
2. Establishing a framework for managing IT to deliver value to the organization
3. Ensuring adequate internal controls and regulatory compliance
1,2, and 3
1 and 2 only
1 and 3 only
2 and 3 only
The Board and senior management should be reminded of the value of IT. And that whenever a business process is automated, the effect to the organization is
Higher IT costs, higher business costs
Higher IT costs, higher revenue
Lower IT costs, higher revenue
Lower IT costs, lower business costs
This provides an overall picture of IT performance aligned to the objectives of the organization. Its is developed by listing the objectives of IT and establishing measurements that track performance against objectives.
Enterprise risk management
Corporate governance
Balance scorecard
Metric management
IT governance is a relatively new subset of corporate governance that focuses on the management and assessment of strategic IT resources. The key objectives of IT governance are to reduce risk and ensure that investments in IT resources add value to the organization.
True
False
