2. Online Audit Techniques

Question 1

SCARF/ EAM

Answer 1

System Control Audit Review File/ Embedded Audit Module

Question 2

SCARF Technique

Answer 2

The use of this technique involves embedding specially written audit software in the organization’s host application system so the application systems are monitored on a selective basis

transactions different from criteria are stored in file for later review

Question 3

Snapshot Technique

Answer 3

This technique involves taking what might be termed pictures of the processing path that a transaction follows, from the input to the output stage.

Used when an audit trail is required

Question 4

Audit Hooks Technique

Answer 4

This technique involves embedding hooks in application systems to function as red flags and to induce IS security and auditors to act before an error or irregularity gets out of hand.

early detection

Question 5

Integrated test facility (ITF) Technique

Answer 5

It creates a fictitious entity in a database to process test transactions simultaneously with live input. It can be used to incorporate test transactions into a normal production run of a system.

Question 6

Continuous and intermittent simulation (CIS) Technique

Answer 6

This means that the simulation is notified about each transaction that is entered to the application and accesses to database by the DBMS

notification of transactions with specific criteria

Question 7

Which online auditing techniques is most effective for the early detection of errors or irregularities

Answer 7

Audit hooks

Question 8

Which technique is used by IS auditor to detect duplicate invoice records within an invoice master file
or
identify excess inventory from the previous year

Answer 8

Generalized audit software (GAS)

Question 9

Best technique to identify transactions as per pre-defined criteria

Answer 9

Continuous and intermittent simulation (CIS)

Question 10

Which technique allows an audit trail to be captured

Answer 10

snapshots

Question 11

Information obtained using SCARF technique

Answer 11

system exceptions
statistical samples
application system errors
profiling data

Question 12

pre-determined results are compared with processing output to ascertain correctness of system processing
and
does not require setting up separate test environment/test processes.

Answer 12

ITF