The client’s computerized exception reporting system helps audit teams conduct a moreefficient audit because ita. Condenses data significantly.b. Highlights abnormal conditions.c. Decreases the necessary level of tests of computer controls.d. Is an efficient computer input control.

The client’s computerized exception reporting system helps audit teams conduct a moreefficient audit because ita. Condenses data significantly.b. Highlights abnormal conditions.c. Decreases the necessary level of tests of computer controls.d. Is an efficient computer input control.

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Similar questions

In assessing the possibility of invalid data in a human resources computer system, such as incorrect job classifications, ages exceeding retirement age, or erroneous ethnic classifications, the auditor should employ the following approach to determine the potential extent of the problem:Select one: a. Submit test data to test the effectiveness of edit controls over the input of data. b. Use generalized audit software to select a sample of employees. Use the sample to determine the validity of data items and project the result to the population as a whole. c. Review and test access controls to ensure that access is limited to authorized individuals. d. Use generalized audit software to develop a detailed report of all data outside specified parameters.
In auditing program change control, the IT auditor will: a. Not need to inspect program authorization forms for signatures b. Ensure an organization is following the process described in their documentation for program change control c. Make sure that only computer programmers move their own changes into a production environment d. Make sure that only computer programmers have tested the changes they made to programs
SCOPE OF AUDIT IN A CIS ENVIRONMENT High Speed low clerical error Concentration of duties shifting of internal control basea. application systems development controlb.systems software control Disappearance of manual reasonable impact of poor system Exception reporting man-machine interface explain briefly and give examples
Obtaining an understanding of the internal control structure is required for first time audit client, but not necessary for recurring clients. TRUE OR FALSE? WHY?
Distinguish between errors and irregularities. Which do you think concern the auditors the most? 3. Distinguish between errors and irregularities. Which do you think concern the auditors the most? 4. Compare and contrast the following disaster recovery options: empty shell, recovery operations center, and internally provided backup. Rank them from most risky to least risky, as well as most costly to least costly . 5. Auditors examine the physical environment of the computer center as part of their audit. Many characteristics of computer centers are of interest to auditors. What are they? Discuss. 6. What is a disaster recovery plan? What are the key features? 7. What are some typical problems with passwords? 8. What are biometric devices? 9. In a distributed data processing system, a database can be centralized or distributed. What are the options? Explain. 10. Explain the role of accountants in the conceptual design stage. 11. Explain why the Systems Development Life Cycle is of…
When is more frequent monitoring of internal controls not required?* When employees are poorly trained. When the control activity and risk being managed are important. When a department is making changes to an application being used in that department. When internal controls have recently been changed to reduce the frequency of errors.
Evaluating data reliability is a critical part of the audit process. Explain the differences among the following in terms of reliability: Data from internal versus external sources. Written data versus verbal conversation records. Data obtained from direct versus indirect methods. Data obtained from original documents versus electronic scans.
Why is the audit team more concerned with controlling the exposure to the risk of overreliancethan with the risk of underreliance?a. Only the risk of overreliance results in an incorrect audit decision.b. The risk of underreliance is not related to the audit team’s study and evaluation of internalcontrol.c. The risk of overreliance can ultimately result in the audit team’s failing to reduce auditrisk to acceptable levels.d. The risk of underreliance can be controlled by performing tests of controls during theinterim period.
General Controls. Indicate the benefits of each of the following examples of general controls. a. Echo checks are designed and built into the computer by the manufacturer.b. The company schedules regular maintenance on its computer hardware.c. The company involves users in its design of programs and selection of prepackaged software and programs.d. New programs are tested and validated prior to being implemented.e. Documentation is required prior to modifying existing programs using “emergency”change orders.f. The duties of system analysts, programmers, and computer operators are appropriatelyseparated.g. Appropriate backup and data retention policies are implemented.h. The access rights granted to employees are periodically reviewed and evaluated, giving consideration to known changes resulting from promotions and transfers within the company.
In a non public audit (AICPA), auditors might chose to not test controls if Select an answer and submit. For keyboard navigation, use the up/down arrow keys to select an answer. a Design of control is weak/deficient, Controls Risk is High, or High cost of testing I/C b Design of control is strong/effective, Control Risk is low or low cost of testing
The difference between assessing control risk for IT control activities versus assessing control risk for manual control activities is best described as follows: Multiple Choice О in a manual environment it is important for the auditor to gain an understanding of the internal control activity before assessing control risk. О in an IT environment, it is not important to gain an understanding of the internal control activity before assessing control risk. О In an IT environment, it is likely that control risk will be assessed as low on largely all audit engagements. О the assessment process that needs to be undertaken for IT controls is essentially the same as would be taken for manual controls.