2014 Review

Question 1

Which of the following outlines the overall authority to perform an IS audit?

A. The audit scope, with goals and objectives
B. A request from management to perform an audit
C. The approved audit charter
D. The approved audit schedule

Answer 1

C. The approved audit charter

Question 2

In performing a risk-based audit, which risk assessment is completed initially by the IS auditor?

A. Detection risk assessment
B. Control risk assessment
C. Inherent risk assessment
D. Fraud risk assessment

Answer 2

C. Inherent risk assessment

Question 3

While developing a risk-based audit program, on which of the following would the IS auditor MOST likely focus?

A. Business processes
B. Critical IT applications
C. Operational controls
D. Business strategies

Answer 3

A. Business processes

Question 4

Which of the following types of audit risk assumes an absence of compensating controls in the area being reviewed?

A. Control risk
B. Detection risk
C. Inherent risk
D. Sampling risk

Answer 4

C. Inherent risk