What language does eXtensible Business Reporting language (XRBL) use?
XML
What’s the name of the document that XRBL creates?
an instance document
What process aggregates expenses for different departments for use by higher ups?
responsibility accounting
What is the chart of accounts?
List of all accounts with numbers (typically assets start with 1, expenses start with 5), each digit in the number being some way of classifying the account
What is the interaction between posting timing and closing timing?
Once you close a period you can’t post a transaction to that period, this is an issue because transactions might be recorded in a given period but not posted to that period
What is a system journal entry vs a manual journal entry?
a system journal entry is automatically created, a manual entry has to be MANUALLY entered
What is a maturity model?
Shows how far along a company is at achieving a goal
In a maturity model what are the four classification levels?
limited, informal, defined, optimized
What 3 things does an internal audit committee provide to their company?
assurance, insight, objectivity
What are the four main requirements of SOX?
CEOs and CFOs are responsible for their financials, have to provide a internal controls report, have to provide a cybersecurity report, have to have an external audit report
What is exposure within the context of risks?
exposure is the part of the risk that remains after a control is applied
What are some risks for software developed in-house?
fraud, cost of maintenance/knowledge transfer, lack of modern processes
What are some risks of software purchased from another vendor?
updates that require additional costs, downtime/crashes, data stolen
What is the difference between private and public cloud applications?
private applications are made specifically for the business, public are accessible over the internet and aren’t customized but are cheaper
What’s the difference between software as a service, platform as a service, and infrastructure as a service?
SaaS gives you a ready-made application, PaaS gives you a method to develop a software, IaaS gives you just the base infrastructure like servers
What are the three “bodies” which enforce standards for controls?
Governing body, management, internal audit
What is the procure-to-pay process generally?
the process by which a company purchases inventory/supplies
What is a purchase requisition?
its part of the procure-to-pay process, basically a request for supplies/inventory
What is the difference between a purchase order (PO) and a purchase requisition?
a purchase order comes after a purchase requisition and involves an identified supplier
What is the “Govern” component of the Cybersecurity Framework Structure thing?
Govern is basically making sure that all cybersecurity controls are identified, recorded, and communicated to everyone
In the context of encryption, what defines a key?
a key is a string of numbers/letters that takes the place of (acts as a proxy for) a normal peice of text
In the context of encryption what issues do systems face vis a vis keys?
keys need to be of a certain length or they can be brute-forced
What’s issue does public key encryption solve in private key encryption?
Private key encryption is a problem because in order to send messages both parties have to agree upon the key which is hard to do in a public space like the internet. Private key encryption allows you to have an inbox with a private key known only to the owner and a public key known to everyone, so anyone can send a message but only the owner can read them
What are hashes in cryptography?
they are set of characters created immediately in response to an input, can tell you if two inputs are the same
