To properly evaluate the collective effect of preventative, detective, or corrective controls within a process, an
IS auditor should be aware of which of the following? Choose the BEST answer.

Which of the following is the MOST critical step in planning an audit?

Which of the following would prevent accountability for an action performed, thus allowing nonrepudiation?

The traditional role of an IS auditor in a control self-assessment (CSA) should be that of a(n):

Parity bits are a control used to validate:

A check digit is an effective edit check to:

When are benchmarking partners identified within the benchmarking process?

An intentional or unintentional disclosure of a password is likely to be evident within control logs. True or false?

A transaction journal provides the information necessary for detecting unauthorized _____________
(fill in the blank) from a terminal.

What is an edit check to determine whether a field contains valid data?