CH 12 Flashcards
How do information technologies enhance internal controls?
1) computer controls replace manual controls
2) Higher-quality information is available
What are risks of information technologies?
1) Risks to hardware and data
2) Reduced audit trail
3) Need IT experience and separation of IT duties
How risks to hardware and data?
1) Reliance on hardware and software
2) Unauthorized access
3) Data loss
4) Systematic vs Random errors
what are the components that make up reduced audit trail?
1) Visibility of audit trail
2) Lack of traditional authorization
3) Reduced human involvement
( all increase detection risks)
What are internal contorls specfic to information technology?
1) application of controls
2) General controls
What are systems of development?
1) typical test strategies
a) pilot testing
b) Parallell testing
What are physical and online security controls: online and physical?
1) online
a) user id
b) password control
c) separate add on security software
2) Physical controls
a) keypad entrances
b) badge entry systems
c) security cameras
d) Security personnel
Are backup of critical files are part of contingency plan?
1) yes
What are application controls?
1) designed to control for each software application
a) input controls
b) output controls
c) processing controls
What are three batch input controls?
1) financial total ( all records in batch)
2) Hash total( all codes from records)
3) record count ( total of records in a batch)
What are the five processing controls?
1) validation test
2) sequence test
3) arithmetic accuracy test
4) data reasonableness test
5) Completeness test
What do out put controls do?
1) focus on detecting errors after processing is completed rather than on preventing errors
What is the impact of information technology?
1) general contorls on system wide applications
2) effects of general controls on software changes
3) Obtaining an understanding of client general controls
4) Relating IT controls to transaction related audit objectives
5) effect of IT controls on substantive testing
How does IT environments , while auditing, varied complexity?
1) Less
a) audit around the computer
i) smaller companies
ii) IT controls less effective
2) more
a) Audit through the computer
i) Parallel
ii) Test data