STI College (multiple campuses) Activity 1 auditing in CIS. AUDIT EVIDENCE (15 points: 3 items x 5 p

downloaded from

Scholarfriends

https://scholarfriends.com Downloaded by: browsegrades@gmail.com | https://scholarfriends.com/singlePaper/303270/sti-college-multiple-campuses-activity-1-auditingin-cis-audit-evidence-15-points-3-items-x-5-p Distribution of this document is illegal.

AUDIT EVIDENCE (15 points: 3 items x 5 points) Direction: Read the given cases. Then, identify the most applicable technique of gathering evidence in each case. Justify your answer in no more than five (5) sentences.

1. Anna Santos audited the information system of Flores Corporation. Upon her evidence collection, she wanted to verify if the management assumes full responsibility for formulating, developing, documenting, promulgating, and controlling policies covering general aims and directives.

Answer: The most appropriate technique of obtaining evidence for Anna Santos is to review Flores Corporation's IS policies and procedures. An IS auditor should determine whether suitable policies and processes are in place in order to determine whether employees understand and implement the adopted rules and procedures. As indicated in the preceding example, her goal is to see if management is willing to take full responsibility for establishing, implementing, documenting, promulgating, and administering policies with wide goals and objectives. In order to obtain the necessary evidence, periodic assessments of the adequacy of systems and procedures should be carried out.

2. Veronica is the information systems (IS) auditor of Puno Corporation. In the execution of the audit, Veronica wants to know how the controls are established in the departments within the organization.

Specifically, she wants to know how responsibilities are segregated in each department.

Answer: In this case, Veronica's best option for gathering proof is to examine Puno Corporation's IS organizational structures. Given her objectives, this strategy will surely aid her in understanding how controls are implemented and whether the company provides adequate separation or division of duties in various areas. In the organization being audited, an information security expert should be able to analyze them. In order to acquire enough data, IS audit and assurance should be able to examine these organizational structures and determine the level of control they provide.

3. Brylle is one of the auditors of Alejandria Corporation (AC). He was assigned to test the controls over the cash of Alejandria. The accountant of AC prepares monthly bank reconciliation through the use of Microsoft Excel. Brylle wanted to know if the final amounts in the bank reconciliation are correct.

Answer: Based on the facts of the case, reviewing Alejandria Corporation's IS documentation is the most acceptable technique of acquiring evidence for Brylle as an auditor. Her goal is to figure out if the bank reconciliation's final figures are correct, and one step she can do is to assess the paperwork for an information system, which could be hard copy or saved online. As an IS auditor, she must assess This study source wasthe downloaded CourseHero.com 03-23-2023 03:40:14 GMT -05:00 quality by of 100000858468549 IS documents.from She may checkonthe accuracy of the bank reconciliation with test plans https://www.coursehero.com/file/140409232/03-Activity-1-auditing-in-CISdocx/

and reports, program and operations papers, program change logs and histories, user manuals, and operations manuals, among other things.

This study source was downloaded by 100000858468549 from CourseHero.com on 03-23-2023 03:40:14 GMT -05:00

https://www.coursehero.com/file/140409232/03-Activity-1-auditing-in-CISdocx/ Powered by TCPDF (www.tcpdf.org)