Company.com has contracted with an external consulting firm to implement a commercial financial system to replace its existing in-house developed system. In reviewing the proposed development approach, which of the following would be of GREATEST concern?

• A.Acceptance testing is to be managed by users.
• B.A quality plan is not part of the contracted deliverables.
• C.Not all business functions will be available on initial implementation.
• D.Prototyping is being used to confirm that the system meets business requirements.

Comment: *

Name: *

Email: *

Verification: *

Which procedure provides the GREATEST assurance that corrective action to an audit report has been taken?

• A.Reporting to the audit committee or the board of directors concerning specific action taken or lack thereof
• B.Performing subsequent audit tests to verify resolution of the deficiencies
• C.Inquiring about the current status of the recommendation
• D.Requesting a written management reply to the audit report identifying corrective action for each deficiency

Comment: *

Name: *

Email: *

Verification: *

During an audit of a mission-critical system hosted in an outsourced data center, an IS auditor discovers that contracted routine maintenance for the alternate power generator was not performed. Which of the following should be the auditor's MAIN concern?

• A.Fraudulent behavior by the outsourcer charging for work not performed
• B.Failure of the alternate power generator during a power outage
• C.High repair costs if faulty generator parts are not detected in a timely manner
• D.Loss of warranty due to lack of system maintenance

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is assigned to perform a postimplementation review of an application system. Which of the following situations may have impaired the independence of the IS auditor? The IS auditor:

• A.implemented a specific control during the development of the application system.
• B.designed an embedded audit module exclusively for auditing the application system.
• C.participated as a member of the application system project team, but did not have operational responsibilities.
• D.provided consulting advice concerning application system best practices.

Comment: *

Name: *

Email: *

Verification: *

During an IS audit the auditor identifies significant delays in granting computer access to new employees. Which of the following should be reviewed FIRST to determine the root cause?

• A.Current workflow model .
• B.Existing access rights
• C.Key performance indicators (KPIs)
• D.Service level agreements (SLAs)

Comment: *

Name: *

Email: *

Verification: *