Module 3

Question 1

business risk

Answer 1

threat that an action will stop the company from achieving its objectives

Question 2

categories of control activities

Answer 2

authorisation
physical
information processing
performance reviews
segregation of duties

Question 3

entity level controls

Answer 3

help establish a tone and culture of the business

Question 4

limitations of internal control systems

Answer 4

relevancy obsolescence
cost
collusion
human error
unusual transactions
management override

Question 5

key areas of ITGC

Answer 5

access to data
program development
computer operations
continuity of operations

Question 6

access to programs and data

Answer 6

awareness of security policies
segregation of duties

Question 7

program changes and development

Answer 7

authorisation
development
testing
approval

Question 8

SDLC

Answer 8

process to introduce, develop, maintain and enhance software

Question 9

computer operations

Answer 9

job processing
backup and recovery
problem management

Question 10

continuity of operations

Answer 10

ability to carry on trading after a disaster