When reviewing input controls, an IS auditor observes that, in accordance with corporate policy, procedures al
When reviewing input controls, an IS auditor observes that, in accordance with corporate policy, procedures allow supervisory override of data validation edits. The IS auditor should:
When using an integrated test facility (ITF), an IS auditor should ensure that:
When using an integrated test facility (ITF), an IS auditor should ensure that:
A clerk changed the interest rate for a loan on a master file. The rate entered is outside the normal range fo
A clerk changed the interest rate for a loan on a master file. The rate entered is outside the normal range for such a loan. Which of the following controls is MOST effective in providing reasonable assurance that the change was authorized?
The GREATEST advantage of using web services for the exchange of information between two systems is:
The GREATEST advantage of using web services for the exchange of information between two systems is:
An IS auditor reviewing an accounts payable system discovers that audit logs are not being reviewed. When this
An IS auditor reviewing an accounts payable system discovers that audit logs are not being reviewed. When this issue is raised with management the response is that additional controls are not necessary because effective system access controls are in place. The BEST response the auditor can make is to:
When evaluating the controls of an EDI application, an IS auditor should PRIMARILY be concerned with the risk
When evaluating the controls of an EDI application, an IS auditor should PRIMARILY be concerned with the risk of:
When reviewing an organizations approved software product list, which of the following is the MOST important t
When reviewing an organizations approved software product list, which of the following is the MOST important thing to verify?
An existing system is being extensively enhanced by extracting and reusing design and program components. This
An existing system is being extensively enhanced by extracting and reusing design and program components. This is an example of:
An IS auditor performing an application maintenance audit would review the log of program changes for the:
An IS auditor performing an application maintenance audit would review the log of program changes for the:
After discovering a security vulnerability in a third-party application that interfaces with several external
After discovering a security vulnerability in a third-party application that interfaces with several external systems, a patch is applied to a significant number of modules. Which of the following tests should an IS auditor recommend?