Save
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

CISA Chapter 1

The IS Audit Process

QuestionAnswer
Role of the IS Audit function Est. by Audit Charter; Approved by highest level of Mgmt (BOD,Audit); State mgmt's overall authority,scope, & responsibilities of the Audit function; Be appropriately documented in the Audit Charter
IS Auditors should Maintain competency,update skills,obtain training; Be technically competent, having skills and knowledge necessary to perform one's audit work; Required annual CPE
Audit Planning consists of Short-Term - Audit issues covered current yr; Long-Term - Risk related issues and changes in the IT organizations strategic direction
8 Steps in Audit Planning are 1)Understand mission,objectives & processes; 2)Identify policies & procedures 3)Evaluate the risk assessment 4)Perform risk analysis 5)Conduct an internal control review 6)Set the audit scope and objectives 7)Develop the audit approach 8)Assign re
6 Steps IS Auditor to understand business 1)Touring key facilities 2)Reading annual reports,industry pubs 3)Reviewing LT strategic plans 4)Interview key mgr's 5)Review PY Audit reports 6) Identify specific regulations to IT
5 Steps to Determine entities level of compliance with external requirements 1)Identify gov or other agencies dealing with IT 2)Document laws & regulations 3)Assess if mgmt & IA have considered relevant external requirements 4)Review IA documents that address adherence to laws 5)Determine adherence to established procedures
An Example of strong control practices Sarbanes-Oxley Act of 2002: Requires Co. to adapt COSO - Internal Control - Integrated Framework from the Committee of Sponsoring Organizations of the Treadway Commission
ISACA Code of Professional Ethics 1)Support compliance standards/procedures 2)Perform duties w/due diligence & best practices 3)Serve the interest of Shareholders 4)Maintain privacy & confidentiality of Co. 5)Maintain competency in field 6)Inform mgmt all facts 7)Support CPE
Created by: cclugston
Popular Accounting sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards