CSCI E 159

Interviewing and Observing Personnel - correct answersActual Functions - An adequate test to ensure that the individual who is assigned and authorized to perform a particular function is the person who is actually doing the job. Actual Processes and Procedures - allows the IS auditor to gain evidence of compliance and observe deviations, if any. Security Awareness - Should be observed to verify an individuals understanding and practice of good preventive and detective security measu...

-

9 pages

Written in 2026/2027

Grade A+

SteveMWill

Information Access/Data Owners - correct answersresponsibility to define criticality (and sensitivity) levels of information assets Also given FINAL responsibility for authorizing access to business app Data Custodians: - correct answersresponsibility to implement information security within an app - based on requirements set by data owner (safeguarding data according to direction provided by data owner) Piggybacking - correct answersunauthorized persons following authorized persons,...

-

12 pages

Written in 2026/2027

Grade A+

SteveMWill

During an IS audit, which is the BEST method for an IS auditor to evaluate the implementation of segregation of duties within an IT department? A. Discuss it with the IT managers. B. Review the job descriptions of the IT functions. C. Research past IS audit reports. D. Evaluate the organizational structure. Question #: 919 CISA Job Practice Task Statement: 1.3 - correct answersthe answer is A. A. Discussing the implementation of segregation of duties with the IT managers is the bes...

-

8 pages

Written in 2026/2027

Grade A+

SteveMWill

The purpose of a checksum on an amount field in an electronic data interchange communication of financial transactions is to ensure - integrity can be used to identify unauthorized modifications. - A checksum Which of the following is an attribute of the control self-assessment approach? - Broad stakeholder involvement The control self-assessment (CSA) approach - emphasizes management of and accountability for developing and monitoring the controls of an organization's business pr...

-

5 pages

Written in 2026/2027

Grade A+

SteveMWill

Source code - correct answersuncompiled, archive code Object code - correct answerscompiled code that is distributed and put into production; not able to be read by humans Inherent risk - correct answersthe risk that an error could occur assuming no compensating control exist Control risk - correct answersthe risk that an error exists that would not be prevented by internal controls Detection risk - correct answersthe risk that an error exists, but is not detected. The risk that an I...

-

15 pages

Written in 2026/2027

Grade A+

SteveMWill

An audit charter should be approved by: - correct answersHigher Management The audit charter should: - correct answersIncorporate the scope, authority, and responsibility of the audit department. The prime objective of an audit charter is to: - correct answersDocument the responsibility and authority of the audit department The document that delegates the authority to the audit department is: - correct answersThe audit charter The prime reason for a review of the organization chart...

-

7 pages

Written in 2026/2027

Grade A+

SteveMWill