Information Technology in Internal Auditing

CAAT tools are used by the Auditor to perform substantive testing. CAAT stands for

• Computer Aided Audit Technique

• Computer Aided Audit Tools

• Computer Assisted Audit Technique

• Computer Accounting and Auditing Technique

All of these are types of IT audits, EXCEPT:

• Information security

• Business continuity

• Website color scheme

• Access controls

The essential aspect to be understood about the organisation subject to IT audit is

• Organisation’s business and its strategic goals and objectives

• Significant application supporting operations

• Major pending projects in progress

• All of the above

Application controls includes

• IT operational controls

• Control over processing

• Physical controls

• Policy and procedure controls

How does IT audit support governance and risk management?

• By developing information security policies for organizations

• By evaluating controls and minimizing risks in IT environments

• By implementing IT systems to support organizational objectives

• By providing financial statements for IT operations

What is a key benefit of Electronic Working Papers (EWPs)?

• Reduced need for cybersecurity measures

• Improved accessibility through cloud-based systems

• Elimination of IT-specific audit tasks

• Decentralisation of audit documentation

Which of the following is a common risk associated with e-commerce?

• Reduced overhead costs

• Faster buying process

• Unauthorised modifications to websites

• Enhanced marketing opportunities

Which of the following is a recommended strategy for improving e-commerce security?

• Allow unrestricted access to sensitive data

• Use SSL encryption for secure transactions

• Rely solely on antivirus software for protection

• Avoid training staff on security protocols