Acct Info System

A company has the following control in place; all program changes must be tested and the test results documented, reviewed, and approved by appropriate personnel prior to the implementation of the change into production. Your sample for testing this control should come from: a. All change requests submitted to the Change Approval Board b. All change requests approved by the Change Approval Board c. All testing results documentation d. All changes implemented into production

d. All changes implemented into production

The IT Systems Administrator is responsible for maintaining and implementing system and application access roles and functionality assignments based upon requests received from business process owners.

True

User accounts are created in the system by the manager of each department.

False

User identities (accounts) for Logical Access Control are assigned a Role within the system that determines their access rights; and this Role assignment is determined and implemented by the IT Applications System Administrator.

False

User identities for Logical Access Control are often shared by various employees for efficiency purposes.

False

All terminated or transferred employee access control accounts/role assignments are updated as a group once every 4 months.

False

Any certified programmer can implement a program change and place them into production.

False

For code that contains ITD controls, changes are made in the Production environment prior to testing the change; to ensure that good production quality data is available for the test.

False

Programmers are assigned WRITE access to the Production environment through the Change Management Tool.

False

System testing and validation is done after the system change is placed in the production environment to ensure data test accuracy for the Financial Statement audit.

False

Separation of duties for the Purchase process activities is accomplished through the assigning of appropriate roles to Purchase process personnel in the system.

True

Roles assigned to individuals are reviewed and evaluated monthly and any corrections made and documented.

True

Change Management staff are assigned WRITE access to the Production environment through a Change Management Tool to promote changes after testing.

True

Code is checked-out from the Production environment into the Development environment and an audit trail is established.

True

Logs are generated by the change management tool to trace program moves and changes in production and are reviewed monthly by management.

True

A change management process weakness could likely lead to: (circle all that apply) (Each correct answer: 1 point. Each incorrectly selected answer: -1 point.) a. Inaccurate data in the system b. Increased audit testing c. Reduction in the automated application controls testing d. Reduction in the Logical Access Control testing

a. Inaccurate data in the system b. Increased audit testing

A company has the following control in place; the IT System Administrator disables all user accounts based upon a list of employee terminations received from HR. Your sample for testing this control should come from: a. A list of all current employees received from HR b. A list of terminated employees from HR c. A list of all newly hired employees from HR d. A list of all employee accounts that were disabled

b. A list of terminated employees from HR

ITGCs are tested by financial statement auditors for which of the following reasons: (circle all that apply) (Each correct answer: 1 point. Each incorrectly selected answer: -1 point.) a. To eliminate the need for ITD controls testing in an audit b. To help provide reasonable assurance that automated application controls operated correctly during the entire audit period c. To help determine if ITD controls can be relied upon to help produce accurate data in the financial statements d. To help determine which processes and systems are financially significant to the financial statements and therefore need to be tested

b. To help provide reasonable assurance that automated application controls operated correctly during the entire audit period c. To help determine if ITD controls can be relied upon to help produce accurate data in the financial statements