Graded
1. Audit Formal examination of information systems to ensure compliance and
ettective- ness.
2. Assurance Confirmation of compliance with laws, regulations, and policies.
3. Information Valuable data and information within an organization.
as- sets
4. Control Structure of controls used to manage and mitigate risks.
frame- work
5. Evidence Information used to support audit conclusions.
6. Audit report Document presenting weaknesses and recommendations for
remediation.
7. Audit charter Document outlining the scope and responsibilities of the audit
function.
8. Audit planning Process of establishing audit strategy and specific procedures.
9. Audit universe Comprehensive list of processes considered for audit.
10. Short-term Consideration of audit issues to be covered within the year.
plan- ning
11. Long-term Consideration of risk-related issues and changes in IT strategic direction.
plan- ning
12. EDI Electronic Data Interchange - electronic transfer of documents
between trading partners.
13. VAN Value-Added Network - proprietary network used for EDI.
14. EDI risks Loss of confidentiality, unauthorized access, loss or duplication of
transmissions.
1/
5
, ISACA CISA Exam Review Questions And Answers A+
Graded
15. Standards, encryption, authentication, and message validation.
2/
5