Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Audit > Auditing and IT > Flashcards

Auditing and IT Flashcards

1
Q

Auditing I/C in a co.’s IT environment helps to?

A
  1. ) Plan the rest of the audit

2. ) Asses the level of Control Risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a problem with auditing IT?

A

Less documentation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are 4 things that can affect the assessment of control risk in auditing IT?

A
  1. ) Unauthorized access to systems or data is more difficult to catch.
  2. ) Systems access controls adds another layer to separation of duties analysis
  3. ) Focus should be on general controls
  4. ) New systems
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Audit of IT is not required when?

A
  1. ) Controls are redundant to another department.
  2. ) The system doesn’t appear to be reliable and testing controls wouldn’t be an efficient use of time.
  3. ) Cost > Benefit
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

An audit of IT can be performed without directly interacting with the system if?

A
  1. ) System isn’t complex/complicated

2. ) System output is detailed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Who are IT personnel?

A
  1. ) Database admin
  2. ) Systems Analyst
  3. ) Librarian
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does a database admin do?

A
  1. ) Maintains database
  2. ) Restricts access
  3. ) Responsible for IT I/C
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does a systems analyst do?

A
  1. ) Recommends changes or upgrades

2. ) Liaison between IT and users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does a librarian do?

A
  1. ) Responsible for disc storage

2. ) Holds system documentation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is generalized audit software

A
  1. ) Uses computer speed to quickly sort data and files, which leads to a more efficient audit.
  2. ) compatible with different client IT systems
  3. ) Extracts evidence from client databases
  4. ) Tests data without auditor needing to spend time learning the IT system in detail.
  5. ) client-tailored or commercially produced.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the types of data in Structured Query Lnaguage (SQL)?

A
  1. ) Relational database
  2. ) Data definition language
  3. ) Data manipulation language
  4. ) Data control language
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a relational database?

A
  • A group of related spreadsheets

- Retrieves information through queries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is data definition language?

A
  • defines a database
  • gives information on database structure
  • maintains tables - can be joined together
  • establishes database constraints
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is data manipulation language?

A
  • maintains and queries a database

- auditor needs information, so client uses DML to get the information needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is data control language?

A
  • controls a database

- restricts access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are check digits?

A
  • consistently added to a set of numbers

- makes it more difficult for a fraudulent account to be set up or go undetected.

17
Q

What is code review?

A
  • tests a program’s processing logic

- advantageous because auditor gains a greater understanding of the program

18
Q

What is a limit test?

A
  • examines data and looks for reasonableness using upper and lower limits.
19
Q

Wat is the test data method?

A
  • auditor processes data with client’s computer
  • fake transactions are used to test program control procedures
  • each control needs to only be tested once
20
Q

What is a problem with test data method?

A
  • fake data could combine with real data
21
Q

What are operating logs?

A
  • Auditor can review logs to see which applications were run and by whom
22
Q

What is access security software?

A
  • helpful in online environments

- restricts computer access; may use encryption

23
Q

What is library management software?

A

Logs any changes to system/applications, etc.

24
Q

What are embedded audit modules?

A
  • assist with audit calculations

- enable continuous monitoring in an audit environment that is changing

25
Q

What is a weakness with embedded audit modules?

A

requires implementation into the system design.

26
Q

What is an audit hook?

A

Application instruction that gives auditor control over the application to grab transactions for analysis.

27
Q

What is transaction tagging?

A

Auditor tags transactions and traces them through the system.

28
Q

What is extended records?

A

Adds audit data to financial records to assist in audit trail creation

29
Q

What is real time processing?

A

Destroys prior data when updated aka “Destructive Updating”. Requires well documented audit trail.

30
Q

Why should an auditor audit both systems and applications?

A

If auditor aonly audits the outputs of a computer system and doesn’t also audit the software applications, an error in the applications could be missed.

31
Q

What is parallel simulation?

A

Client data is processing generalized audit software (GAS). Sample size can be expanded without significantly increasing the audit cost.

Audit (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions