Chapter 4

Question 1

Auditing Standard No. 5

Answer 1

An audit of internal control of financial reporting that is integrated with an audit of financial statement.

Question 2

(AICPA) Auditing Standards Board of the American Institute of Cerfied Public Accounts (AICPA)

Answer 2

Is an organization that issues and maintains auditing standards

Question 3

(CVOSO) Committee of Sponsoring Organizations of the Treadway Commission

Answer 3

An organization that provides guidance to executive management on organizational governance, internal controls, and risk management.

Question 4

Control Activities

Answer 4

Provides the details on how to achieve control objectives.

Question 5

(COBIT) Control objectives for information and related technology.

Answer 5

A framework providing best practices for IT governance and control

Question 6

Control Objectives

Answer 6

States the high-level organizational goal of information system measures

Question 7

Descriptive control

Answer 7

Measures to be applied to a system that are high level and provide a lot of flexibility.

Question 8

ERM) Enterprise risk management framework

Answer 8

The process organizations use to manage risks related to achieving their goals.

Question 9

Framework

Answer 9

A conceptual set of rules and ideas that provide structure to a complex and challenging situation.

Question 10

(ISMS) Information Security Management System

Answer 10

A set of policies governing information security management.

Question 11

(ITGI) Information Technology Governance Institute

Answer 11

A research think tank that provides resources on IT governance.

Question 12

Integrated audit

Answer 12

An audit that combines the assessment of financial reporting along with the assessment of related IT controls.

Question 13

(IEC) International Electrotechnical Commission

Answer 13

An internation, nonprofit organization that publishes global standards on electrotechnology, or all things electronic and electric.

Question 14

(ISO) International Organization for Standardization

Answer 14

The worlds largest publisher of wordwide standards.

Question 15

ISACA

Answer 15

A global professional organization that provides resources and guidance around IT governance.

Question 16

ISO/IEC 27002

Answer 16

An information security code of practice that provides good practices for information security management.

Question 17

(ITAF) IT ASSURANCE FRAMEWORK

Answer 17

A framework for IT assurance, created by ISACA.

Question 18

NIST 800-53

Answer 18

Recommended security controls developed by NIST.

Question 19

NIST 800-53A

Answer 19

A guide for assessing security controls developed by NIST.

Question 20

(PDCA) PLAN-DO-CHECK-ACT

Answer 20

An iterative process for continuous improvement.

Question 21

Prescriptive control

Answer 21

Detailed and specific measures to be applied to a system.

Question 22

(RACI) Responsible, accountable, consulted, and informed

Answer 22

A table used to document the Responsibility, Accountability, Consulted and informed characteristics for tasks and roles.

Question 23

Risk IT

Answer 23

A framework based on guiding principles to effectively manage risk.

Question 24

(SAS 70) Statement on Auditing Standards No. 70: Service Organizations

Answer 24

A widely recognized and accepted auditing standard for service organizations.

Question 25

VAL IT

Answer 25

A framework that governs IT investments, created by ISACA.