To determine if unauthorized changes have been made to production code the BEST audit procedure is to:

• A.examine the change control system records and trace them forward to object code files.
• B.review access control permissions operating within the production program libraries.
• C.examine object code to find instances of changes and trace them back to change control records.
• D.review change approved designations established within the change control system.

Comment: *

Name: *

Email: *

Verification: *

Which of the following goals would you expect to find in an organization's strategic plan?

• A.Test a new accounting package.
• B.Perform an evaluation of information technology needs.
• C.Implement a new project planning system within the next 12 months.
• D.Become the supplier of choice for the product offered.

Comment: *

Name: *

Email: *

Verification: *

Effective IT governance requires organizational structures and processes to ensure that:

• A.the organization's strategies and objectives extend the IT strategy.
• B.the business strategy is derived from an IT strategy.
• C.IT governance is separate and distinct from the overall governance.
• D.the IT strategy extends the organization's strategies and objectives.

Comment: *

Name: *

Email: *

Verification: *

During the evaluation of controls over a major application development project, the MOST effective use of an IS auditor's time would be to review and evaluate:

• A.project plans.
• B.acceptance testing.
• C.cost-benefit analysis.
• D.application test cases.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a prevalent risk in the development of end-user computing (EUC) applications?

• A.Applications may not be subject to testing and IT general controls
• B.increased development and maintenance costs
• C.increased application development time
• D.Decision-making may be impaired due to diminished responsiveness to requests for information

Comment: *

Name: *

Email: *

Verification: *