Free IIA-CIA-PART3-3P Exam Braindumps
Certified Internal Auditor - Part 3, Business Analysis and Information Technology Questions 671–675 (page: 136)

Updated On: 10-Feb-2026

Advantages of life cycle methodologies are:

  1. Lower overall development costs when requirements change frequently.
  2. Ability to give users a functioning system quickly.
  3. Reduced application development time to achieve a functioning system.
  4. Enhanced management and control of the development process.

Answer(s): D

Explanation:

The systems development life cycle approach is the most common methodology applied to the development of large, highly structured application systems. The life cycle approach is based on the idea that an information system has a finite life span that is limited by the changing needs of the organization. This cycle is analytically divisible into stages. A new system life cycle begins when the inadequacy of the current system leads to a decision to develop a new or improved system. This method is a structured process for controlling the creative activity required to devise, develop, and implement an information system. The process is described in varying terms by different writers, but the nature and sequence of the steps are essentially the same. Life cycle methodologies provide enhanced management and control of the development process because they provide structure for a creative process by dividing it into manageable steps and specifying what must be produced in each phase.



Program documentation is a control designed primarily to ensure that:

  1. Programmers have access to production programs.
  2. Programs do not make mathematical errors.
  3. Programs are kept up to date and perform as intended.
  4. No one has made use of the computer hardware for personal reasons.

Answer(s): C

Explanation:

Complete, up-to-date documentation of all programs and associated operating procedures is necessary for efficient operation of a computer installation. Maintenance of programs is important to provide for continuity and consistency of data processing services to users. Program documentation the program run manual) consists of problem statements, systems flowcharts, operating instructions, record layouts, program flowcharts, program listings, test data, and approval and change sheets.



Rejection of unauthorized modifications to application systems could be accomplished through the use of:

  1. Programmed checks.
  2. Batch controls.
  3. Implementation controls.
  4. One-for-one checking.

Answer(s): C

Explanation:

General controls include organizational controls, such as a policy an implementation control) that requires new programs and changes in programs after adequate testing) to be formally approved before being put into operation implemented). This policy is reflected in the maintenance of approval and change sheets with appropriate authorizations.



Systems development audit engagements include reviews at various points to ensure that development is properly controlled and managed. The reviews should include all of the following except:

  1. Conducting a technical feasibility study on the available hardware. software, and technical resources
  2. Examining the level of user involvement at each stage of implementation.
  3. Verifying the use of controls and quality assurance techniques for program development, conversion, and testing.
  4. Determining if system, user, and operations documentation conforms to formal standards.

Answer(s): A

Explanation:

The technical feasibility study is conducted by IT professionals, not internal auditors.



A hospital is evaluating the purchase of software to integrate a new cost accounting system with its existing financial accounting system.
Which of the following describes the most effective way for the internal audit activity to be involved in the procurement process?

  1. The internal audit activity evaluates whether performance specifications are consistent with the hospital's needs.
  2. The internal audit activity evaluates whether the application design meets internal development and documentation standards.
  3. The internal audit activity determines whether the prototyped model is validated and reviewed with users before production use begins.
  4. The internal audit activity has no involvement since the system has already been developed externally.

Answer(s): A

Explanation:

The internal audit activity should be involved to ensure the existence of performance specifications consistent with the hospital's needs. Incomplete or erroneous specifications may result in the acquisition of unusable software or an unenforceable contract with the software vendor.



Viewing page 136 of 312
Viewing questions 676 - 680 out of 1555 questions


Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!