QUESTION: 181 Exam Topic: 2, Volume B

A bank is developing an integrated customer information system. The type of audit involvement that would most likely help avoid implementation of a system that does not cover all types of accounts would be:

A design review.
An application control review.
A source code review.
An access control review.

Answer(s): A

Reveal Solution Next Question

QUESTION: 182 Exam Topic: 2, Volume B

The internal audit activity can be involved with systems development continuously, immediately prior to implementation, after implementation, or not at all. An advantage of continuous internal audit involvement compared to the other types of involvement is that:

The cost of audit involvement can be minimized.
There are clearly defined points at which to issue audit comments.
Redesign costs can be minimized.
The threat of lack of audit independence can be minimized.

Answer(s): C

Reveal Solution Next Question

QUESTION: 183 Exam Topic: 2, Volume B

In a review of an electronic data interchange application using a third-party service provider, the auditor should:

Ensure encryption keys meet International Organization for Standardization (ISO) standards.
II. Determine whether an independent review of the service provider's operation has been conducted.
III. Verify that only public-switched data networks are used by the service provider.
IV. Verify that the service provider's contracts include necessary clauses, such as the right to audit.
I and II only
I and IV only
II and III only
II and IV only

Answer(s): D

Reveal Solution Next Question