The internal auditor of a small company has recommended to the CEO that it invest in a disaster recovery plan (DRP) because of several identified vulnerabilities. Traditional in-house DRP approaches are, however, not a viable option because the company lacks the necessary IT resources to implement and manage these tasks. The auditor has suggested that outsourcing disaster recovery to a cloud-based service provider may be a reasonable alternative. The CEO has no experience with cloud computing and has asked the internal auditor to provide him with more information. Required: Prepare a report outlining cloud computing. Your report should address the following: List the key features of cloud computing

The internal auditor of a small company has recommended to the CEO that it invest in a disaster recovery plan (DRP) because of several identified vulnerabilities. Traditional in-house DRP approaches are, however, not a viable option because the company lacks the necessary IT resources to implement and manage these tasks. The auditor has suggested that outsourcing disaster recovery to a cloud-based service provider may be a reasonable alternative. The CEO has no experience with cloud computing and has asked the internal auditor to provide him with more information. Required: Prepare a report outlining cloud computing. Your report should address the following: List the key features of cloud computing

Accounting Information Systems

10th Edition

ISBN:9781337619202

Author:Hall, James A.

Publisher:Hall, James A.

Chapter15: Auditing It Controls Part Ii: Security And Access

Section: Chapter Questions

Problem 2P

See similar textbooks

Similar questions

Which of the following statements is most accurate? a. ERP systems are commercial software packages that are sometimes called turnkey systems because they can be implemented by the user with little or no modification. b. Substantive tests provide evidence focused on the system controls. c. Public accounting firms that provide attest services are not allowed under SOX to offer IT advisory services. d. Both small and large firms that have standardized information needs are potential customers for commercial software. e. External auditors may rely on the work of internal auditors only if they report to the controller or the CEO of the client company.
ANC Company has recently acquired new accounting software to replace the old program that is already getting obsolete. There was an apparent inadequacy of training and supervision in the implementation and actual running of the program and it was realized that there was a better program that should have been purchased, it resulted to a lot of mistakes and delays in the processes. Which inherent limitation of internal control is best described in the given situation? a. Management Override and Intervention b. Lapse of Judgment and Collusion c. Lapse of judgment and Breakdowns d. None of these
You overheard a friend at a party say that computers and information technology will greatly decrease the demand for auditors. Do you believe this to be true. How would you respond to this comment?
After finishing your accounting degree, you joined an accounting firm. This is a medium-size accountingfirm with a reasonable range of clients. You are in an engagement meeting with one of your clients, andyour client's management raises some concerns. In particular, the management is concerned that theaudit tests that you perform will disrupt operations. Your client has recently implemented a datawarehouse. The management suggests that you draw the data for analytical reviews and substantivetesting from the data warehouse instead of the operational database. Further, the management pointsout that operational data are copied weekly into the data warehouse, and all data you need are containedthere.Required: Based on the given scenario, outline your response to the management's proposal and mentionany concerns you might have.
You are the systems analyst of Crabtree Computers Limited. Several recent incidents of employee errors and omissions have made you realized that there are certain flaws in the internal controls and auditing systems of the company. You decided to take a number of steps to mitigate the existing risks and to improve the audit and control processes. You are concerned with the segregation of duties. Required 1. What functions must be separated? If ideal segregation of duties is not economically feasible, what are some compensating controls that would help reduce the risk of fraud or error? 2. Using a flowchart diagram, explain the risk assessment process that you will implement at Crabtree Computers Limited to endeavour to improve the current system. 3. The information system of Crabtree Computers Ltd. is deemed to be 90% reliable. A major threat in the procurement process has been discovered with an exposure of $300,000. Two control procedures are identified to…
Select the correct answer(s) for the following multiple-choice questions. Note that there may be more than one correct answer. The number of incidents and the total dollar losses from computer fraud are increasing rapidly for several reasons: a. Many instances of computer fraud go undetected and many frauds are not reported. b. Many companies are moving to cloud services where there are few data security controls. c. Internet sites offer step-by-step instructions on how to perpetrate computer fraud and abuse. d. Law enforcement is not interested in preventing or prosecuting computer fraud. e. There are no laws against computer fraud so prosecution is difficult
true or false Dense fog is the cause of loss that could increase the severity of an automobile accident. The possibility of a business entity’s computer system being hacked and disrupting its daily business activities is an example of enterprise risk. In the same situation, an individual with high subjective risk often has higher risk perception, so he will estimate a bigger chance of loss relative to an individual with low subjective risk. Objective risk refers to the severity aspect of loss meanwhile subjective risk refers to the frequency aspect of loss
Internal Control Considerations in End-User Computing Environments. Because of theuse of personal computers by many businesses, audit teams must know about the potentialinternal control weaknesses inherent in such an environment. This knowledge is crucial ifaudit teams are to make a proper assessment of the related control risk and to plan an effective and efficient audit approach.Required:In the following case study, assume that you are participating in the audit of Chicago Appliance Company and that the background information was obtained during the planning phaseof the engagement. You have been asked to (a) consider the potential internal control weaknesses that exist in this end-user application and (b) assess how those internal control weaknesses could alter the audit plan for the current year.Background InformationChicago Appliance is a wholesale distributor of electric appliances. Its sales in each of thelast two years have been approximately $40 million. All accounting…
Some people believe database technology may eliminate the need for double-entry accounting. This creates three possibilities: (1) the double-entry model will be abandoned; (2) the double-entry model will not be used directly, but an external-level schema based on the double-entry model will be defined for accountants’ use; or (3) the double-entry model will be retained in database systems. Which alternative do you think is most likely to occur? Why?
Companies of all sizes try to reduce business risks, create disaster recovery plans, and also purchase insurance for what they cannot completely control. Therefore, the business risk is the risk that: Select one: a.The auditor will give an inappropriate auditor’s opinion when the financial report is materially misstated b.The entity’s business objectives will not be attained due to the external and internal environment affecting the entity and the industry in which it operates. c. An error will occur given the environmental characteristics of the account balance. d.The auditor will be exposed to loss to their professional practice from litigation or adverse publicity arising in connection with an audit.
Explain how risk of material misstatement should he assessed and what effect that assessment will have on detection risk for the following audit client:xyz Corporationis one of several companies engaged in the manufacture of high- speed, high- capacity data storage devices. The industry is very competitive and subject to quick changes in technology. MUHEET’s operating results would place the company in the second quartile in terms of profitability and financial position. The company has never been the leader in the industry, with its products typically slightly behind the industry leaders in terms of performance.
You are conducting substantive tests on the accounts receivable file to verify its accuracy. The file is large, and you decide to test only a sample of the records. Because of the complexity of the database structure, you cannot access the database directly. The client’s systems programmer uses a utility program to write a query that produces a flat file, which he provides for testing purposes. Required Discuss any concerns you would have as an auditor and any actions you would take.