Module 8: Audit Collection Techniques Flashcards

1
Q

Evidence is any information used by an IS auditor to determine whether the entity or data being audited follows the __ ___ or ____ and ____ ____ ____

A

Established criteria; objectives; supports audit conclusions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Evidence: What should be considered when planning the IS audit with regards to evidence?

A
  1. The type of audit evidence
  2. Its use to meet objectives
  3. Varying levels of reliability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Evidence: Audit Evidence may include what examples?

A
  1. IS Auditor’s Observation
  2. Notes from Interviews
  3. Results of Independent Confirmations by an IS auditor
  4. Materials extracted from correspondences and internal documentation or contracts with external partners
  5. Results of Test Procedures
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Sources of Evidence: Firsthand information from an original source

A

Primary Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Sources of Evidence: What are the characteristics of primary Information?

A
  1. Original
  2. expensive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Sources of Evidence: Which source of information is not original and expensive

A

Secondary Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Sources of Evidence: involves facts about the organization

A

Internal sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Sources of Evidence: Involves facts about economies, market, competition

A

External sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Sources of Evidence: Internal sources is used in ___ and ____ measurement

A

Planning and performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Sources of Evidence: Facts about the world outside the organization

A

External Sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Sources of Evidence: What are the main examples of secondary sources?

A

Xerox copy of the original file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Sources of Evidence: Which is more practical to use secondary or primary Information source

A

Secondary. Less expensive and doesn’t take away the reliability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Types of Evidence: Obtained by direct inspection or observation of people, property or events

A

Physical Evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Types of Evidence: Physical evidence may be documented in the form of ____ summarizing the matters inspected or observed, photographs, charts, maps, or actual samples

A

Memoranda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Types of Evidence: consists of created information

A

Documentary evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Types of Evidence: What are some examples of documentary evidence?

A
  1. Letters
  2. Contracts
  3. Accounting Records
  4. Invoices
  5. Management Information
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Types of Evidence: obtained from others through statements received in response to something

A

Testimonial

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Types of Evidence: Examples of Testimonial evidence include?

A
  1. Inquiries
  2. Questionnaires
  3. Interviews
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Types of Evidence: includes computations, comparisons, reasoning, and separation of information into components

A

Analytical evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Types of Evidence: Which is the most reliable among the types audit evidences?

A

Physical Evidence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Standards of Audit Evidence: What are the standards of Audit Evidence?

A
  1. Sufficiency
  2. Relevance
  3. Competence
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Standards of Audit Evidence: Sufficiency, Relevance, and Competence tells what about the evidence?

A
  1. Sufficiency: convincing
  2. Relevance: logical
  3. Competence: reliable
23
Q

Standards of Audit Evidence: What happens when audit evidences don’t meet the three standards?

A

Additional corroborative evidence is required before expressing an audit opinion

24
Q

Standards of Audit Evidence - Sufficiency: What is an essential factor in evaluating sufficiency?

A

It must be convincing enough for a prudent person to reach the same conclusion

25
Standards of Audit Evidence - Sufficiency: How does sufficiency apply to sampling methods?
When the samples selected provide reasonable assurance that they are representative of the whole population
26
Standards of Audit Evidence - Sufficiency: Rank these evidences from most to least persuasive - Auditor's Observation of auditee's procedures - Externally prepared documents - Physical examination - Auditor's inquiry of management
1. Physical Examination 2.Externally prepared documents 3. Auditor's Observation of the Auditee's procedures 4. Auditor's Inquiry of management
27
Standards of Audit Evidence - Relevance: Evidence is relevant to a finding if?
It has a logical relationship to that finding
28
Standards of Audit Evidence - Relevance: evidence is ____ with the ___ ____ and supports audit findings and recommendations
Consistent; audit objectives
29
Standards of Audit Evidence - Competence: Evidence is competent to the extent that is?
Consistent with fact
30
Standards of Audit Evidence - Competence: Evidence that is both ___ and ____ is competent
Available and reliable
31
Standards of Audit Evidence - Relevance: Competent information is reliable and the best available through the use of ___ __ ___
Appropriate Audit Functions
32
Determinants for Evaluating the reliability of Audit Evidence: What are the determinants?
1. Independence of the provider of evidence 2. Qualifications of the provide of evidence 3. Objectivity of the evidence 4. Timing of the Evidence 5. Quality of Internal Controls 6. Source of Evidence
33
Determinants for Evaluating the reliability of Audit Evidence: Evidence obtained from inside the organization is more reliable (T or F)
False. Other way around
34
Determinants for Evaluating the reliability of Audit Evidence: Signed contracts or agreements with external parties could be considered reliable if?
The original documents are made available
35
Determinants for Evaluating the reliability of Audit Evidence: IS auditor should always consider the qualifications and functional responsibilities of the person (T or F)
True
36
Determinants for Evaluating the reliability of Audit Evidence: IS Auditors tests are always reliable (T or F)
False. Auditors are subject to qualification requirements
37
Determinants for Evaluating the reliability of Audit Evidence: Auditor's review of media inventory is less reliable than auditor's analysis of the efficiency of an application with personnel (T or F)
False. Other way around. May interpretation yung efficiency
38
Determinants for Evaluating the reliability of Audit Evidence: An IS auditor should consider the time during which information exists or is available in determining the nature, timing and extent of compliance testing and, if applicable, substantive testing
Timing of the evidence
39
Determinants for Evaluating the reliability of Audit Evidence: Evidence from an effective internal controls system is more competent than from weak control (T or F)
True
40
Determinants for Evaluating the reliability of Audit Evidence: Evidence from the auditor is less reliable that indirectly obtained evidence (T or F)
False. More dapat
41
Gathering Techniques: What are all the gathering techniques
1. Reviewing IS Organization Structures 2. Reviewing IS policies and procedures 3. Reviewing IS Standards 4. Reviewing IS Documentation 5. Interviewing Appropriate Personnel 6. Observing processes and employee performance 7. Reperformance 8. Walkthroughs
42
Gathering Techniques: In reviewing IS organization techniques, what should the IS auditor do?
Gain an understanding and evaluate general organizational controls
43
Gathering Techniques: When reviewing policies and proceudres, what should the IS auditor do?
1. Review if there are appropriate policies in place 2. Determine if personnel understand and follow 3. Verify if management assumes full responsibility for policies and procedures 4. Periodic reviews for appropriateness is carried out
44
Gathering Techniques: in reviewing IS documentation, documentation is either in the form of what?
Hard copy or electronically
45
Gathering Techniques: In reviewing IS documentation, what is the first step?
understand the existing documentation
45
Gathering Techniques: in reviewing IS documentation, what controls should be in place if documentation is electronic
Document integrity
46
Gathering Techniques: in reviewing interviewing appropriate personnel, what is a good approach
interview form or checklist
47
Gathering Techniques: in reviewing interviewing appropriate personnel, personnel interviews are ____ in nature and never ___
Discovery, accusatory
48
Gathering Techniques: in observing, the auditor must be what?
unobtrusive
49
Gathering Techniques: Reperformance generally provides better evidence (T or F)
True
50
Gathering Techniques: Reperformance is used when?
A combination of inquiry, observation, and examination of evidence does not provide enough assurance
51
Gathering Techniques: Walkthroughs confirms
understanding of controls
52
In interviewing and observing personnel, what should you look out for?
1. Actual Functions - how polices are understood and practiced 2. Actual Procedures - testing physical controls 3. Security Awareness - practice of preventive and detective controls 4. Reporting relationships - SoD
53
What are the drawbacks of observation?
1. Observer may interfere with the observed environment 2. when noticed, may change their usual behavior