CMA Final · Cost and Management Audit · Information Systems Security Audit
An auditor reviewing a payroll application wants to verify that the program logic computes deductions correctly, by processing the auditor's own fictitious employee records through the live program and comparing results with independently pre-calculated outputs. This computer-assisted audit technique is known as:
The technique is test data. The auditor prepares fictitious records with pre-calculated results, processes them through the program and compares the outputs to confirm that the logic works properly. Parallel simulation, embedded modules and file extraction analyse real data or monitor live transactions instead.
- AIntegrated test facility with parallel simulation
- BTest data techniqueCorrect
- CEmbedded audit module
- DGeneralised audit software extraction of the payroll master file
Explanation
In the test data technique, the auditor prepares dummy transactions with known expected results, runs them through the program and compares outputs. Parallel simulation uses the auditor's own program on real data, and an embedded module monitors live transactions. Software extraction analyses actual file data rather than testing program logic with prepared inputs.
Did you get it right without looking?
One question tells you little. A timed set on Information Systems Security Audit shows your real accuracy, how long you take and where you lose marks.
More Information Systems Security Audit questions
- Which of the following best describes the 'integrity' objective in the confidentiality-integrity-availability model used in information secu…
- Which of the following best describes a 'hot site' in a disaster recovery arrangement?
- Which of the following is an example of an application control rather than a general IT control?
- Which of the following is an example of a logical access control, as distinct from a physical access control?
- During an audit of a firm's ERP, the auditor wants to test whether application controls correctly reject invalid data, using the company's l…
- Which audit technique involves the auditor processing test transactions with known expected results through the client's live application to…