Section 1 (Chap 1 & 2) Flashcards
For effective audit planning what is needed?
A thorough understanding of business process applications and controls
While planning an individual audit assignment, what should an IS auditor consider?
Prior audit reports Risk assessment reports Regulatory requirements Standard operating processes Technological requirements
What is the next step after doing the overall annual planning?
planning individual audit assignments
Who should the approved audit plan be communicated to first?
Senior management
Business functions and other stakeholders
The internal audit team
What can risk factors affect?
The frequency of the audit
How is selection criteria carried out?
Each business process may undergo qualitative or quantitative risk assessment in respect to relevant risk factors
After risk is evaluated, criteria may be defined to determine the risk of each process
Audit plan can then be designed to consider all high-risk areas
What should be included in an audit universe>
All of the significant processes of the enterprise’s business should be included.
What is one of the criteria needed for audit planning?
Having an audit universe
What are some of the benefits of audit planning?
Helps the auditor focus on high-risk areas
Helps in the identification of resource requirements to conduct the audit
Helps to estimate the budget for the audit
Helps to carry out audit work in a defined structure, which ultimately benefits the auditor as well as the auditee units
An audit plan helps to identify and determine what aspects?
Objectives of the audit Scope of the audit Periodicity of the audit Members of the audit team Method of the audit
Risk Factors
Factors that have an impact on risk. The presence of those factors increases the risk, whereas the absence of those factors decreases the risk.
Quantitative Risk Assessment
Risk is assessed using numerical parameters and is quantified
Qualitative Risk Assesment
Risk is assessed using qualitative parameters such as high, medium, and, low
What is an audit universe?
An inventory of all the functions/processes/units under the organization
What should happen if an audit is outsourced to another audit firm?
The objective of the audit, along with its detailed scope should be incorporated in an audit engagement letter