IT Audit

Question 1

NOTE : same objective, responsibility, process as normal audit
Focus → TOC rather than ST

Answer 1

Yes

Question 2

DATA RECOVERY
- Internal (on site) → most expensive
- External (off site)
(1) Hot Site (recovery operation center)
(2) Cold Site (empty shell) → least expensive
- Mutual Aid Pact

Answer 2

Yes

Question 3

Blackbox or Whitebox
- auditing Around the computer
- computers are not utilized

Answer 3

Blackbox
- WhiTebox → Through the computer, computers are utilized

Question 4

Blackbox or Whitebox
- focus is input and process
- IT experience required, use of CAATS

Answer 4

Whitebox
- Blackbox → input and output, no IT

Question 5

COMPUTER ASSISTED AUDIT TECHNIQUES
1. Test Data Approach
2. ITF
3. Parallel Simulation

Give example for each.

Answer 5

TEST DATA APPROACH
- uses client’s actual software
- insert fictitious data

INTEGRATED TEST FACILITY (ITF)
- uses client’s actual software
- insert fictitious data (integrated or simultaneous with actual data)

PARALLEL SIMULATION
- uses special audit software
- insert actual data (to both client and auditor)