ISACA auditing standards and guidelines

Question 1

ISACA requirements for certification holders

Answer 1

Maintain at least 120 hours of training every three years (and a minimum of 20 hours per year). in order to maintain certification.

Question 2

Relationship between ISACA audit standards, audit guidelines, and Code of Professional Ethics

Answer 2

Audits standards & Code of Ethics are mandatory

Audit guidelines is optional

Question 3

Payment Card Industry Data Security Standard : PCI-DSS

Answer 3

Data Security Standard developed by a consortium of the major credit card branch.

Question 4

ISACA Auditing and Assurance Standards (ITAF)

Answer 4

known as the Information Technology Assurance Framework (ITAF) defines minimum standards of performance related to security, audits, and the actions that result from audits.

Question 5

How should senior management support audit charter

Answer 5

Through direct signature or by linking the audit charter to corporate policy.

Question 6

1207, Irregularity and Illegal Acts

Answer 6

The auditor should recognize that irregularities and/or illegal acts could be ongoing in one or more of the processes that he is auditing. The IS auditor should obtain written attestations from management that state management’s responsibilities for the proper operation of controls.

Question 7

If IS Auditor encounters irregularities or illegal acts during audit

Answer 7

Document all conversations and retain all evidence of correspondence. Report any matter of material irregularities or illegals acts to managements.

Question 8

If material findings or irregularities prevent the auditor from continuing the audit,

Answer 8

the auditor should carefully weigh his options and consider withdrawing from the audit.

Question 9

Standards vs Guidelines

Answer 9

1- Standards are statements that all IS auditors are expected to follow, and they can be considered a rule of law for auditors.

2- Guidelines are statements that help IS auditors better understand how ISACA standards can be implemented.

Question 10

Risk Analysis in the context of an audit

Answer 10

Is the activity that is used to determine the areas that warrant additional examination and analysis.

Question 11

ISACA audit and assurance guidelines

Answer 11

contain information that helps the auditor understand how to apply ISACA audit standards. These guidelines are a series of articles that clarify the meaning of the audit standards.