Understanding IT General Control (ITGC) Quiz

What is the primary objective of IT General Controls (ITGC)?

• To evaluate the effectiveness of IT systems in financial reporting

• To develop new IT applications

• To ensure data is stored in the cloud

• To manage software licenses

ITGCs are vital to auditing financial statements because they help ensure that the underlying IT systems, which process and report financial data, are secure, reliable, and functioning correctly. Auditors evaluate the effectiveness of these controls to assess the risk of material misstatements in the financial statements.

• TRUE

• FALSE

Which of the following characteristics is true about Software as a Service?

• High upfront costs

• Full control over data

• Limited scalability

• Vendor-managed maintenance

Which of the following describes a characteristic of in-house systems?

• Limited customization

• Limited scalability

• Full control over data

• Quick implementation

What does the Test of Design (ToD) aim to evaluate?

• The scalability of IT systems

• Whether the control is well designed to mitigate the risks.

• The cost of implementing controls

• All are correct

Which of the following is NOT an area of Security Management?

• System Development

• Access Control

• Change Management

• Data Protection

Security Management focus on ensuring that an organization's IT environment operates securely, reliably, and effectively. These controls are fundamental for supporting the overall IT environment and maintaining the integrity, availability, and confidentiality of data.

• TRUE

• FALSE

Which of the following is a key aspect of Technology Infrastructure?

• Incident Management

• Data Protection

• Access Control

• Change Management

Which of the following is NOT part of Technological Infrastructure under Understanding the IT Environment?

• Batch Processing and Job Scheduling

• Real Time Processing

• Data related incidents

• Password Management

This domain ensures that technology investments are align with organizational goals, systems are developed and acquired effectively, and maintenance processes uphold system reliability and security.

• TECHNOLOGY INFRASTRUCTURE

• APPLICATION CONTROL

• TECHNOLOGY ACQUISITION, DEVELOPMENT AND MAINTENANCE

• SECURITY MANAGEMENT