Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

ITABP > Module 9: Data Analysis > Flashcards

Module 9: Data Analysis Flashcards

1
Q

Computer Assisted Audit Techniques: It is used to __ and __ data during an __ __ or ____

A

gather, analyze, IS audit, review

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Computer Assisted Audit Techniques: IS auditors use CAATs to gather information dependently (T or F)

A

False. independently

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Computer Assisted Audit Techniques: Provide a means to gain access and analyze data for a ___ __ ___ and to ___ ___ ___ ___

A

predetermined audit objectives, report the audit findings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Computer Assisted Audit Techniques: Reporting from results in CAATS emphasizes on the?

A

reliability of the records produced and maintained in the system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Computer Assisted Audit Techniques: Although CAATS are useful, IS auditors may resort to manual auditing when needed (T or F)

A

False. It is nearly impossible to audit large organizations manually

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Computer Assisted Audit Techniques: Give examples of CAATS

A
  1. General Audit Software
  2. Test Data
  3. Utility Software
  4. Debugging and Scanning Software
  5. Software tracing and mapping
  6. Expert Systems
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

refers to standard software that has the capability to directly read and access data from various database platforms, flat-file systems and ASCII formats

A

Generalized Audit Software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Generalized Audit Software: GAS has the capability to directly read and access data from what formats?

A
  1. Database platforms
  2. flat-file systems
    3.ASCII formats
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Generalized Audit Software: GAS provides two things to is auditors which are?

A
  1. Independent means to gain access to data for analysis
  2. The ability to use high level problem solving software to invoke functions to be performed on data files
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Generalized Audit Software What are the functions supported by GAS

A
  1. File Access
  2. File Reorganization
  3. Data Selection
  4. Statistical Function
  5. Arithmetical Functions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Generalized Audit Software:File Reorganization enables ___ ___ ___ and ___ with another file

A

indexing, sorting, merging, linking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Generalized Audit Software: Statistical function enables ___ ___ and __ ___

A

sampling, stratification, frequency analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Generalized Audit Software: Data selection enables ___ ___ ____ and ___ ___

A

global filtration conditions, selection criteria

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Generalized Audit Software: Enables the reading of different __ ___ and ___ ___

A

record formats, file structures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Generalized Audit Software: Arithmetical Functions enables ___ ___ and ____

A

arithmetic operators, functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

involve an IS auditor using a sample set of data to
assess whether logic errors exist in a program and
whether the program meets its objectives

A

Test data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Test Data: Is test data real data or not

A

Not

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Test Data: Test data assesses 2 things whether

A
  1. logic errors exist
  2. program meets its objectives
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Test Data: the results of the test are compared to?

A

predetermined expectations

20
Q

a subset of software such as report
generators of the database management system

A

Utility software

21
Q

Utility software provides evidence about?

A

System Control Effectiveness

22
Q

The review of an
application system

A

Debugging/Tracing/Mapping

23
Q

Debugging/Tracing/Mapping will provide information about?

A

internal control built in the systems

24
Q

Gives direction and
valuable information
to all levels of auditors
while carrying out the
audit

A

Expert systems

25
Q

Expert Systems: It gives direction to lower level auditors only (T or F)

A

False, all levels

26
Q

Expert Systems: Expert systems are built on the knowledge base of?

A

Senior auditors and managers

27
Q

What are the Audit application of CAATS?

A

❑ Tests of the details of transactions and balances
❑ Analytical review procedures
❑ Compliance tests of IS general controls
❑ Compliance tests of IS application controls
❑ Network and OS vulnerability assessments
❑ Penetration testing
❑ Application security testing and source code security scans

28
Q

Things to consider for CAATs:
❑ Ease of use for ___ ___ __ audit staff
❑ ___ requirements
❑ Complexity of ___ __ ___
❑ ____ of uses
❑ ____ requirements
❑____ efficiencies
❑ Effort required to bring the ___ ___ into the CAATs for analysis

A
  1. Existing and future
  2. Training
  3. coding and maintenance
  4. flexibility
  5. Installation
  6. Processing
  7. source data
29
Q

Things to consider for CAATs:
❑ Ensuring the ____ of ___ ___ by safeguarding their ____
❑ Recording the ___ ___ of data
downloaded at __ ___ __ to
sustain the ___ of the review
❑ Obtaining ____ to install the software
on the auditee servers
❑ ____ of the software
❑ _____ of the data being
processed

A
  1. integrity, imported data, authenticity
  2. time stamp, critical processing points, credibility
  3. permission
  4. Reliability
  5. Confidentiality
30
Q

Things to consider for CAATs: what is the main thing to do before using caats?

A

Cost benefit analysis

31
Q

When using CAAT, what are considerations?

A
  1. Documentations should be referenced to the audit program
  2. IS auditor should have read-only access to production data
  3. Data manipulation should be in a controlled environment to avoid unauthorized updating
32
Q

Continuous Auditing and Monitoring: Enables an IS auditor to perform tests and assessments in a real-time or near-real-time environment

A

Continuous Auditing

33
Q

Continuous Auditing and Monitoring: Used by an organization to observe the performance of one or many
processes, systems or types of data

A

Continuous Monitoring

34
Q

Continuous Auditing and Monitoring: They should be independent of each other (T or F)

A

True

35
Q

Continuous Auditing and Monitoring: What is the precursor of Continuous Monitoring

A

Continuous Auditing

36
Q

Types of Automated Evaluation Techniques: involves embedding hooks in application systems to function as
red flags and induce IS security and auditors to act before an
error or irregularity gets out of hand

A

Audit Hooks

37
Q

Types of Automated Evaluation Techniques: When is Audit Hooks useful and what is its complexity?

A
  1. When only select transactions or processes need to be examined
  2. Low
38
Q

Types of Automated Evaluation Techniques: During a process run of a transaction, the computer system simulates the instruction execution of the application. As each transaction is entered, the simulator decides whether the
transaction meets certain predetermined criteria and, if so, audits the transaction

A

Continuous and intermittent simulation

39
Q

Types of Automated Evaluation Techniques:

A
40
Q

Types of Automated Evaluation Techniques:

A
41
Q

Types of Automated Evaluation Techniques: how are transactions tagged in snapshots

A

by applying identifies to input data

42
Q

Types of Automated Evaluation Techniques: When is snapshots useful and what is its complexity?

A
  1. When an audit trail is required
  2. Medium
43
Q

Types of Automated Evaluation Techniques: Dummy entities are set up and included in an auditee’s
production files. An IS auditor can make the system either
process live transactions or test transactions during regular
processing runs and have these transactions update the records
of the dummy entity

A

Integrated Test Facility

44
Q

Types of Automated Evaluation Techniques: In integrated test facility when is it useful and its comlexity?

A
  1. When it is not beneficial to use test data
  2. High
45
Q

Types of Automated Evaluation Techniques: The use of this technique involves embedding specially written
audit software in the organization’s host application system so
the application systems are monitored on a selective basis

A

Systems
Control Audit
Review File
and
Embedded
Audit Modules

46
Q

Types of Automated Evaluation Techniques: When is using Systems
Control Audit Review File and Embedded Audit Modules useful and its complexity

A
  1. when regular monitoring cannot be interrupted
  2. Very High

ITABP (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions