DM1: Conducting Audits

Question 1

specific goals that must be accomplished by the audit

Answer 1

audit objective

Question 2

testing used to provide reasonable assurance that control functions; determine where controls comply with organizational policy and procedures; test the existence and effectiveness of defined processes

Answer 2

compliance testing

Question 3

testing used to substantiate the integrity of actual processing

Answer 3

substantive testing

Question 4

sampling model that helps prevent excessive sampling of an attribute by allowing an audit test to be stopped at the earliest possible moment; used when auditors expect relatively few errors in a population

Answer 4

stop-or-go sampling

Question 5

sampling model mostly used when seeking out fraud or irregularities; single error makes entire sample fraud/irregular

Answer 5

discovery sampling

Question 6

statistical model where population is divided in groups and samples are taken from each group

Answer 6

stratified mean per unit

Question 7

statistical model used to estimate the total difference between audited and unaudited values

Answer 7

difference estimation

Question 7

statistical model where sample mean is calculated and considered estimated total

Answer 7

unstratified mean per unit

Question 8

sampling model used to estimate the rate of occurrence of a specific quality or attribute in a population

Answer 8

fixed sample-size sampling

Question 9

software tools that an IS auditor uses for data analysis during an IS audit or review

Answer 9

Computer-assisted audit techniques (CAATs)

Question 10

perform tests and assessments in a real-time or near real-time enviroment

Answer 10

continuous auditing

Question 11

used to observe the performance of one or many processes, systems, or types of data. Ex. real-time antivirus or IDS

Answer 11

continous monitoring

Question 12

continuous auditing technique performed by setting up dummy entities and including them in auditee’s production files

Answer 12

Integrated test facility (ITF)

Question 13

continuous auditing technique performed by embedding hooks in application system to function as red flags

Answer 13

audit hooks

Question 14

continuous auditing technique performed by taking pictures of the processing path that a transaction follows

Answer 14

snapshot

Question 15

continuous auditing technique performed by embedding written audit software into the host application system

Answer 15

systems control audit review file (SCARF)