Information Systems Control And Audit 1st Edition Ron Weber - Solutions

Unlock the potential of your studies with our comprehensive solutions for "Information Systems Control And Audit" by Ron Weber. Access a treasure trove of resources including an online answers key and expertly solved problems. Dive into the solution manual and solutions PDF for detailed chapter solutions and step-by-step answers. Our instructor manual and textbook resources offer a complete test bank and questions and answers to enhance your learning. Enjoy the convenience of free download options, ensuring you have access to the necessary study aids whenever you need them.

Which of the following assertions is accurate concerning the IAASB?(a) The International Auditing and Assurance Standards Board(IAASB) is an independent standard-setting body that serves the public interest(b) The IAASB sets up high-quality international standards for auditing, assurance, and other
Which of the following is accurate concerning the IAASB due process?(a) The IAASB follows a rigorous due process in developing its pronouncement(b) Input is obtained from a wide range of stakeholders including the IAASB’s Consultative Advisory Group national auditing standard setters, IFAC member
Southern Aurora Limited (SAL) is a large Sydney-based financial institution that operates internationally. It has also established strategic alliances with a number of financial institutions based in Singapore, New York, and London. Because of the extensive range of products and services that it
You are the manager of internal audit for the Department of Transport, which is a major government department within your state. You have an internal audit staff of five professionals. Two are senior auditors, and three are junior auditors. Two of the juniors were hired less than 12 months ago in
You have recently been employed as the manager of internal audit for a large multinational financial services company. It is clear to you that you have been given the job because of your reputation as a troubleshooter, your extensive experience with financial institutions, and your widely
You are the manager of internal audit of a large multinational foodstuffs company. One day, you meet with one of your audit seniors at her request. She has primary responsibility for information systems auditing within your company, and she has eight staff members that report to her.At the
You are the manager of internal audit for a large Australian city council. The council is responsible for all the normal services-for example, water, sewerage, roads, waste disposal, parklands, and animal licensing. By world standards, the council's operations are extensive, and its annual budget
Which of the following is least likely to be a major focus when undertaking long-run planning for the information systems audit function?a. Identifying the sequence in which material application systems within the organization in which the information systems audit function is located will be
In a risk management program, the unit of analysis is:a. The exposure on which the audit team is focusingb. The business process or function to be auditedc. The weighting assigned to a generic riskd. The type of resource being considered to support the conduct of the audit
The primary purpose of control self-assessment is to:a. Educate stakeholders about the reliability of different types of controlsb. Make stakeholders aware of the differences between inherent risk, control risk, and detection riskc. Force stakeholders to reflect on the weighting assigned by the
Which of the following is not likely to be covered within an audit charter prepared for an organization's information systems audit function?a. Information systems audit function's place within the organizationb. Scope of the work to be performed by the information systems audit functionc. Audit
Which of the following arguments is most likely to be used in terms of having information systems auditors perform a staff role within an organization:a. Makes better use of scarce information systems audit resourcesb. Promotes greater goal congruence between financial auditors and information
Which of the following arguments is most likely to be used in support of decentralizing the information systems audit function within an organization:a. A shortage of skilled information systems audit staff existsb. Information systems audits must be performed in many locations that are dispersed
Which of the following has been a finding of prior research that has examined whether information systems audit staff should be recruited with an information technology background or an audit background:a. Programmers make better information systems auditors than systems analysts or system
Which of the following is least likely to be a purpose of a yearly staff appraisal meeting conducted between an information systems auditor and his/her manager?a. To determine the interpersonal skills that the information systems auditor needs to develop more fullyb. To affirm the information
Which of the following is least likely to be a reason why the career paths available to information systems auditors are often limited?a. Many organizations have only a few information systems audit positions availableb. Information systems audit skills are too narrow and specialized for many other
If information systems auditors perform a staff function, which of the following aspects of leadership is likely to be most difficult to accomplish?a. Motivating information systems auditors to undertake audit work in technical domains where they have little experienceb. Ensuring that information
Which of the following statements about exercising leadership processes with information systems auditors is most likely to be false?a. An authoritarian leadership style will be most successful when information systems auditors are undertaking audits involving high uncertaintyb. Leadership styles
Employing an independent consultant to evaluate the information systems audit function every few years is likely to provide most assistance in which of the following areas?a. Evaluating the quality of work performed on individual information systems auditsb. Determining whether information systems
Which of the following is least likely to be a criterion for defining a profession?a. Existence of a code of ethicsb. Existence of a disciplinary mechanismc. Government-mandated requirement for registration of practitionersd. Defined common body of knowledge
A major purpose of the Information Systems Audit and Control Foundation's publication called COBIT: Control Objectives for Information and Related Technologies is:a. To establish a basis for a disciplinary mechanism within the information systems audit professionb. To provide benchmarks for the
A major purpose of the Information Systems Audit and Control Association's Statements on Information Systems Auditing Standards is to:a. Cover temporary gaps in the General Standards for information systems auditingb. Show how the General Standards for information systems auditing relate to one
Which of the following was not a major goal when the EDP Auditors Foundation established the CISA examination?a. Providing a basis for a disciplinary mechanism within the information systems audit and control professionb. Motivating people to develop and maintain their competence as information
Which of the following matters is not covered in the code of ethics of the Information Systems Audit and Control Association?a. The need to comply with standards promulgated by the Information Systems Audit and Control Associationb. Support for stakeholders in the audit process to enhance their
Organizations' increasing use of the Internet has had least impact on:a. The overall structure of the approach used to conduct an information systems auditb. Exposures associated with the quality of information systems resources that an organization makes available to other partiesc. The incidence
The primary purpose of using a certification authority in electronic commerce is to:a. Ensure both the vendor and customer choose secure private keysb. Provide a banking facility for both the vendor and the customerc. Ensure that both the vendor and customer comply with the terms of contractsd.
A major way in which business process engineering has undermined controls in organizations is that it has:a. Reduced the effectiveness of data communications controlsb. Reduced separation of duties among employeesc. Reduced the quality of staff needed to perform various tasksd. Reduced the
Information systems auditors should be most concerned about management's decision to undertake outsourcing of the information systems function when:a. A long-term contract with the outsourcing vendor is being contemplatedb. The information systems function plays a strategic role within the
Which of the following statements about the implications of privacy legislation for auditors most likely is false?a. As users of personal data, auditors will be exempt from privacy legislation because of their statutory obligations to audit an organization's accountsb. Internal auditors must
If auditors are seeking to detect whether fraud has caused material misstatements in the accounts, data mining most likely will be used to assist them to:a. Extract data from an object-oriented database that can be used as input to a statistical program for analytical review purposesb. Undertake
Which of the following is not an implication of interorganizational information systems and virtual organizations for the conduct of audit work?a. Processing controls become more important than boundary controlsb. Greater reliance must be placed on the work of other auditorsc. Control and audit
Give two factors that have undermined the importance of computer system efficiency evaluations and two factors that have increased the importance of computer system efficiency evaluations.
Why might auditors be asked to perform an efficiency evaluation of a computer system?
At the outset of an efficiency evaluation study, why is it important to clearly define the purposes of the evaluation?
Why is it usually difficult to estimate the benefits of an efficiency evaluation study?
Briefly explain the difference between a workload model and a system model. To what extent can the workload model be formulated independently of the system model?
Briefly explain the nature of the four major types of performance indices. For each type, give an example of a specific performance index that might be used in an efficiency evaluation study.
Why must a performance index often be described by a probability distribution rather than a single point estimate?
Even if the system to be evaluated is operational, why might auditors decide to use a workload model to evaluate system efficiency rather than the real workload?
What is meant by the representativeness of a workload model? How can the representativeness of a workload model be measured? In practice, why is it sometimes difficult to evaluate the representativeness of a workload model?
The nature of the resource demands generated via the workload model must be appropriate to the system or the component under study. Briefly explain.
Briefly explain the difference between a natural workload model and an artificial workload model. What are the relative advantages and disadvantages of each type of workload model?
Briefly explain the difference between an executable workload model and a nonexecutable workload model. Give an example of each.
What is meant by workload characterization? Give two ways in which auditors might seek to characterize a workload.
Briefly explain the nature of a trace workload model. Give one advantage and one disadvantage of using a trace workload model.
What is the nature of the system model used with an instruction mix workload model? Give three limitations of the output of the system model.
What is the difference between a synthetic job and a kernel program? How will the system models for these two types of artificial workload models differ?
Briefly explain the nature of a benchmark. How are benchmarks developed?
Briefly explain the nature of a probabilistic workload model.
Why should auditors focus on the interevent times when decomposing a system so it can be modeled for efficiency evaluation purposes? When auditors make a decision on the level of the system to be modeled, how must events in a lower-level system be described in the model?
What are the attributes of a computer system that allow it to be modeled as a queuing system?
Briefly explain the difference between an open queuing model and a closed queuing model. What factor might cause auditors to model a computer system as an open queuing model even though a closed queuing model is more realistic?
Briefly explain the importance of the following parameters in a queuing model of a computer system: (a) number of job classes, (b) arrival pattern of job, and (c) service time distribution.
In queuing theory, briefly explain the nature of the Kendall notation. What is its purpose?
What is meant by the processor queuing discipline? How does the queuing discipline affect the nature of jobs awaiting service at the processor?
Why have queuing theorists been concerned with developing approximate methods to solve queuing models?
How can auditors determine which parameters in a queuing model are the most important to calibrate?
Even though the system to be evaluated is operational, why might auditors use a queuing model of the system for efficiency evaluation purposes rather than a simulation model or an empirical model?
Briefly explain the nature of a trace-driven simulation model of a computer system. What are the strengths and limitations of a trace-driven simulation? How can a trace be constructed for a system that is not operational?
What are the three major components of a simulation program? Briefly explain the functions performed by each of these components.
Why is it sometimes difficult to evaluate the validity of a simulation model constructed for efficiency evaluation purposes?
Give two attributes of a simulation that auditors might examine when assessing its face validity as a vehicle for efficiency evaluation purposes.
Briefly explain how auditors would conduct experiments with a simulation model that has been constructed for efficiency evaluation purposes.
Using a simulation, auditors change the device-to-channel assignment to assess the impact on system throughput. How can they determine whether the change has a significant impact on the performance of the computer system under study?
Briefly explain the nature of an empirical model of a computer system that auditors construct for efficiency evaluation purposes.
What factor determines whether auditors use analysis of variance, analysis of covariance, or a regression model when constructing an empirical model of a computer system to evaluate efficiency?
Identify two questions that can be answered by constructing an analysis of variance model to evaluate system efficiency.
What information is provided by the beta coefficients that are estimated when a regression model is constructed to evaluate the efficiency of a computer system
Which of the following sequence of steps most likely will be used in an efficiency evaluation study?a. Construct a system model; construct a workload model; define performance indicesb. Define performance indices; construct a system model; construct a workload modelc. Construct a workload model;
Which of the following is an example of a user-oriented performance index (as opposed to a system-oriented performance index)?a. Channel utilizationb. Throughput ratec. Usable capacityd. Response time
A system workload is:a. The number of jobs in the system under study at any one time during the measurement periodb. The set of resource demands imposed upon the system under study by the set of jobs that occur during a given time periodc. The maximum amount of resources that the system under study
A representative workload is one that:a. Is based on a sample of jobs from the real workload or a trace of the real workloadb. Produces the same values of the performance indices in the system under study as the real workloadc. Is formulated and used only when the real workload is biased or
Which of the following is most likely to be an example of a natural, executable workload model?a. A kernel programb. An instruction mixc. A benchmarkd. A synthetic job
Which of the following is most likely to be an advantage of a natural workload model?a. Its representativeness is highb. It is easy to modifyc. It is cheap to executed. It is compact
Which of the following workload models is most likely to have the highest level of representativeness?a. A kernel programb. A cycle countc. An instruction mixd. A synthetic job
Which of the following is a disadvantage of a probabilistic workload model?a. Lack of compactness with respect to workload characterizationb. Inflexibility when workload characteristics changec. Tractability requirements sometimes lower representativenessd. High development costs relative to
When modeling a computer system, the boundaries between subsystems can be identified by:a. The physical differences between the components that make up each subsystemb. The presence of some form of communication channel between the subsystemsc. A major difference in the time interval between events
In a queuing model of a computer system, which of the following is least likely to be a server?a. processorb. An input/output devicec. Memoryd. A user
A problem with using queuing theory to model computer systems is:a. Closed models, which are often more representative of real systems than open models, are harder to solve mathematicallyb. Queuing models are not useful when the computer system under study has multiple processorsc. Only a limited
A queuing model in which all jobs are generated internally to the model is called:a. An internal modelb. A closed modelc. A mixed modeld. An open model
The most likely reason that approximate analysis will be used to solve a queuing model is:a. The system to be modeled does not involve online, interactive inputb. An open queuing model has been used to model the computer systemc. A natural workload model has been usedd. Restrictive modeling
With a queuing model of a computer system, calibration is the process of:a. Determining the size of the error in the values of the performance indices provided by the queuing modelb. Making the results of an open queuing model approximate the results of a closed queuing modelc. Reducing the size of
Which of the following is least likely to be a reason why auditors use a simulation model to evaluate the efficiency of a computer system?a. Cheaper than a queuing modelb. Used to validate the analytical modelc. The system to be evaluated may not be operationald. An analytical model may not be
Which of the following is least likely to be true of a trace-driven simulation model?a. It produces more accurate results than a simulation based on a probabilistic workload modelb. It is more costly to construct and run than a probabilistic modelc. It is less accurate when sensitivity analyses
Which of the following is least likely to be a way of validating a simulation model?a. Plotting the means of the distribution of arrival times and service times associated with a probabilistic workload modelb. Examining the values of the performance indices produced by the simulation model for
If auditors wish to evaluate the effects on system response time of a changed processor service discipline, a changed channel allocation, and the number of logons that occur each minute, it is most likely that the empirical model they will use is:a. Analysis of varianceb. Factor analysisc. Ana!ysis
Van Dieman's Banking Corporation (VDBC) is a large, Hobart-based bank with branches scattered throughout Australia and New Zealand. It was first established during the convict days in Tasmania, and over the past 100 years it has grown to offer a wide range of wholesale and retail banking
Briefly explain how resource demands are generated in a probabilistic workload model. If the demand for processor time by transactions is distributed normally with a mean of 5 microseconds and a variance of 2.5 microseconds and the random number generator you use for your workload model is
During the design of a new motor vehicle registration system for a state highway department, the systems analysts must decide on the number of terminals that are needed for the clerks who serve customers at the front desk. Customers can come to the counter, pay their registration renewals, and
Spreaditround Ltd., is a large fertilizer company with offices scattered throughout the United States. A communications network links the various offices to the head office in Detroit. The offices have online real-time update capabilities to several centralized databases.Response times in the
We obtain the following results for a regression model used to assess the impact of the number of jobs per hour that request over 5 microseconds of central processor time \(\left(\mathrm{X}_{1}\right)\) and the number of jobs per hour that require more than one work space in main memory
Your organization uses an online real-time update system for several of its application systems. Recently, there has been concern over increasing response times with the system. The workload has been growing. Nevertheless, because two of the online real-time update systems are used by clerical
Chuckle and Sue is a medium-sized, Perth-based firm of solicitors who specialize in providing advice to the yachting industry. Twelve months ago the partners decided to install their first computer system to help them process a rapidly increasing volume of accounting transactions and to obtain
Briefly explain the purposes of long-run planning in relation to the information systems audit function. How might the nature and extent of long-run planning for the information systems audit function differ depending upon where an organization is placed in McFarlan et al.'s (1983) strategic grid?
Briefly explain the purposes of short-run planning in relation to the information systems audit function.
Outline the major steps in a risk-management program.
What is an audit charter? What are the major components of an audit charter? Why does the information systems audit function need an audit charter?
Briefly explain how the information systems auditor's role within an organization will differ depending on whether they are performing a staff function or a line function.
Give two advantages of the information systems auditor performing a stafffunction role within an organization and two advantages of their performing a line-function role.
Give three factors that most likely will affect whether the information systems audit function within an organization will be centralized or decentralized.

Showing 100 - 200 of 2689

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Last

Information Systems Control And Audit 1st Edition Ron Weber - Solutions

Step by Step Answers