Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 591–595 (page: 120)

Updated On: 10-Feb-2026

Which of the following is usually a benefit of transmitting transactions in an electronic data interchange (EDI) environment?

  1. A compressed business cycle with lower year-end receivables balances.
  2. A reduced need to test computer controls related to sales and collections transactions.
  3. An increased opportunity to apply statistical sampling techniques to account balances.
  4. No need to rely on third-parry service providers to ensure security.

Answer(s): A

Explanation:

EDI transactions are typically transmitted and processed in real time. Thus, EDI compresses the business cycle by eliminating delays. The time required to receive and process an order, ship goods, and receive payment is greatly reduced compared with that of a typical manual system. Accordingly, more rapid receipt of payment minimizes receivables and improves cash flow.



The emergence of electronic data interchange EDI) as standard operating practice increases the risk of:

  1. Unauthorized third-party access to systems
  2. Systematic programming errors.
  3. Inadequate knowledge bases.
  4. Unsuccessful system use.

Answer(s): A

Explanation:

EDI is the communication of electronic documents directly from a computer in one entity to a computer in another entity. EDI for business documents between unrelated parties has the potential to increase the risk of unauthorized third-party access to systems because more outsiders will have access to internal systems.



Which of the following are essential elements of the audit trail in an electronic data interchange EDI) system?

  1. Network and sender/recipient acknowledgments.
  2. Message directories and header segments.
  3. Contingency and disaster recovery plans.
  4. Trading partner security and mailbox codes.

Answer(s): A

Explanation:

An audit trail allows for the tracing of a transaction from initiation to conclusion. Network and sender/recipient acknowledgments relate to the transaction flow and provide for the tracking of transactions.



Which of the following statements is true concerning internal control in an electronic data interchange (EDI) system?

  1. Preventive controls generally are more important than detective controls in EDI systems.
  2. Control objectives for EDI systems generally are different from the objectives for other information systems.
  3. Internal controls in EDI systems rarely permit control risk to be assessed at below the maximum.
  4. Internal controls related to the segregation of duties generally are the most important controls in EDI systems.

Answer(s): A

Explanation:

In general, preventive controls are more important than detective controls because the benefits typically outweigh the costs. In electronic processing, once a transaction is accepted, there is often little opportunity to apply detective controls. Thus, it is important to prevent errors or frauds before they happen.



A control that a company can use to detect forged EDI messages is to:

  1. Acknowledge all messages initiated externally with confirming messages.
  2. Permit only authorized employees to have access to transmission facilities.
  3. Delay action on orders until a second order is received for the same goods.
  4. Write all incoming messages to a write-once/read-many device for archiving.

Answer(s): A

Explanation:

If the company acknowledges messages initiated externally, the alleged sender will have the opportunity to recognize that it had not sent the message and will then be able to notify the company of the potential forgery. Then corrective action can be taken by the company.



Viewing page 120 of 312
Viewing questions 596 - 600 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!