Module 6: Audit Project Management Flashcards
What are the basic steps for managing and administering audit projects?
- Plan the audit engagement
- Build the Audit Plan
- Execute the plan
- Monitor Project Activity
Make a realistic estimates of the
time requirements for each task
with proper consideration given
to the _____ of the auditee
availability
What is the difference between control and audit objectives?
-Audit objectives refer to what you want to achieve in an audit
-Control objectives refer to how you want an internal control to function
Audit Objectives: An audit generally incorporates one objective (T or F)
False. Multiples
Audit Objectives: What is mostly the main focus of audit objectives?
To ensure that an internal control exists to minimize risk
To ensure that internal controls functions as expected
Audit Objectives: Audit management may give an IS auditor a general control objective to
review and evaluate when performing an audit. (T or F)
True
Audit Objectives: An is auditor must understand what?
How general audit objectives can be translated into specific IS control objective
Audit Objectives: What is one of the primary purpose of an IS audit
- To identify control objectives
- To identify the related controls that address these objectives
Audit Objectives: An IS auditor should identify both key ____after developing an understanding and documenting the business processes and the applications/functions that support
these processes and general support systems
general and application controls
Audit Phases - Planning: What are the steps in the planning phase of auditing?
- Determine the audit subject
- Determine the audit objective
- Identify the audit scope
- Perform Preaudit Planning
- Determine Procedures
Audit Phases - Planning: A ______ will help the IS auditor define a set of______ that is relevant to the
audit and further determine the ___________ necessary to evaluate different
technologies and their components
- clear scope
- testing points
- technical skills and resources
Audit Phases - Planning: What is done in order to finalize the scope of an audit plan?
Risk assessment
Audit Phases - Planning: In which step does the interviewee of the auditee about activities that should be included in the scope?
Perform preaudit planning
Audit Phases - Planning: What are the resources that can be identified once the subject, objective, and score are defined?
- Technical skills and resources
- Budget and effort
- Location or facilities to be audited
- Roles and responsibilities
- Time frame for stages of the audit
- Sources of information
- Points of contract for admin and logistics arrangement
- Communication plan
Audit Phases - Planning: What are the specific activities in the Audit procedures step of the planning phase?
- Identify departmental policies, standards, and guidelines
- Identify regulatory requirements
- Identify list of interviewees
- Identify methods (including tools)
- Develop audit tools and methodology for testing of controls
- Develop test scripts
- Develop criteria
- Define a methodology to evaluate the results and tests are accurate