Chapter 7 Flashcards
(95 cards)
1
Q
Nature of Computers
A
- fast
- do not think the way humans do
- do not get tired but succumbs to technical problems
- follows the dictum: “do it right the first time, do it right all the time.”
2
Q
Three broad classes of application controls
A
- Input Controls
- Processing Controls
- Output Controls
3
Q
Designed to ensure that the transactions that bring data into the system are valid, accurate, and complete
A
Input controls
4
Q
Data input procedures can be:
A
- Source document triggered (batch)
- Direct input (real-time)
5
Q
Classes of input controls:
A
- Source document controls
- Data coding controls
- Batch controls
- Validation controls
- Input error correction
- Generalized data input systems
6
Q
Five CAATTs approaches used for testing application logic:
A
- Test data method
- Base care system evaluation
- Tracing
- Integrated test facility
- Parallel simulation
7
Q
Source document input requires human involvement and is prone to clerical errors.
A
True
8
Q
Direct input employs real-time editing techniques to identify and correct errors immediately.
A
True
9
Q
Controls in systems that are using physical source documents.
A
Source document controls
10
Q
Control procedures over source documents:
A
- Use pre-numbered source documents
- Use source documents in sequence
- Periodically audit source documents
11
Q
Checks on the integrity of data codes used in processing.
A
Data Coding Controls
12
Q
Three types of processing errors:
A
- Transcription errors
- Single transposition errors
- Multiple transposition errors
13
Q
Three classes of transcription errors:
A
- Addition errors
- Truncation errors
- Substitution errors
14
Q
Occurs when an extra digit or character is added to the code.
A
Addition errors
15
Q
Occurs when a digit or character is removed from the end of a code.
A
Truncation errors
16
Q
The replacement of one digit in a code with another.
A
Substitution errors
17
Q
Occurs when two adjacent digits are reversed.
A
Single transposition errors
18
Q
Occurs when non-adjacent digits are transposed.
A
Multiple transposition errors
19
Q
Data coding controls:
A
Check digits
20
Q
A control digit added to the code when it is originally assigned that allows the integrity of the code to be established during subsequent processing. (suffix, prefix, embedded)
A
Check digits
21
Q
Check-digit techniques:
A
- Sum of digits
- Modulus 11
22
Q
The steps in modulus 11:
A
- Assign weights
- Sum the products
- Divide by the modulus
- Subtract the remainder from the modulus to obtain the check digit.
- Add the check digit to the original code to yield the new code.
23
Q
An effective method of managing high volumes of transaction data through a system, especially paper-fed information system.
A
Batch controls
24
Q
Batch controls provide assurance that:
A
- All records in the batch are processed.
- No records are processed more than once.
- An audit trail of transactions is created from input through processing to the output stage of the system.
25
Two documents used to accomplish batch control objectives:
1. Batch transmittal sheet
2. Batch control log
26
The batch transmittal sheet captures relevant information such as:
1. A unique batch number
2. A batch date
3. A transaction code
4. The number of records in the batch
5. The total dollar value of a financial field (batch control total)
6. The total of a unique non-financial field (hash total)
27
Refers to a simple control technique that uses non-financial data to keep track of the records in a batch.
Hash total
28
Are intended to detect errors in transaction data before the data are processed.
Validation controls
29
Three levels of input validation controls
1. Field interrogation
2. Record interrogation
3. File interrogation
30
Types of files in a computer-based systems:
1. Master file
2. Transaction file
3. Reference file
4. Archive file
31
Audit trails in computer-based systems are less observable than in a traditional manual system.
True
32
Generally contains account data.
Master file
33
A temporary file of transaction records used to change or update data in a master file. Examples are sales orders, inventory receipts, and cash receipts.
Transaction file
34
Stores data that are used as standards for processing transactions.
Reference file
35
Contains records of past transactions that are retained for future reference.
Archive file
36
Examples of transaction files
- Sales orders
- Inventory receipts
- Cash receipts
37
Examples of reference file
- price list used for preparing customer invoices
- list of authorized suppliers
- employee rosters
- customer credit files for approving credit sales
38
Hierarchy of data
1. Field (name, year level)
2. Record (for every student)
3. File (all bsa students)
4. Database (all HNU students)
39
Involves programmed procedures that examine the characteristics of the data in the field.
Field interrogation
40
Common types of field interrogation:
1. Missing data checks
2. Numeric-alphabet data checks
3. Zero value checks
4. Limit checks
5. Range checks
6. Validity checks
7. Check digit
41
Used to examine the contents of a field for the presence of blank spaces.
Missing data checks
42
Determine whether the correct form of data is in a field.
Numeric-alphabet data checks
43
Are used to verify that certain fields are filled with zeros.
Zero-value checks
44
Determine if the value in the field exceeds an authorized limit.
Limit checks
45
Assign upper and lower limits to acceptable data values.
Range checks
46
Compare actual values in a field against known acceptable values.
Validity checks
47
Identify keystroke errors in key fields by testing the internal validity of the code.
Check digit
48
Procedures which validate the entire record by examining the interrelationship of its field values.
Record interrogation
49
Determine if a value in one field, which has already passed a limit check and arrange check, is reasonable when considered along with other data fields in the record.
Reasonableness checks
50
Are tests to see if the sign of a field is correct for the type of record being processed.
Sign checks
51
Are used to determine if a record is out of order.
Sequence checks
52
To ensure that the correct file is being processed by the system.
File interrogation
53
Verify that the file processed is the one the program is actually calling for.
Internal label checks
54
Are used to verify that the version of the file being processed is correct.
Version checks
55
Prevents a file from being deleted before it expires.
Expiration date check
56
What consists the label part of the Header Label on Magnetic Tape
1. Tape serial number
2. File name
3. Expiration date
4. Control totals
5. Number of records
57
When errors are detected in a batch they must be corrected and the records resubmitted for reprocessing.
Input error correction
58
Three common error handling techniques:
1. Correct immediately.
2. Create an error file.
3. Reject the entire batch.
59
Some forms of errors are associated with the entire batch and are not clearly attributable to individual records.
Reject the batch.
60
Upon detecting a keystroke error or an illogical relationship, the system should halt the data procedure until the user corrects the error.
Correct immediately.
61
At the end of the validation procedure, the records flagged as errors are removed from the batch and placed in a temporary error holding file until the errors can be investigated.
Create an error file.
62
Includes centralized procedures to manage the data input for all of the organization's transaction processing systems.
**Generalized Data Input Systems**
63
It eliminates the need to recreate redundant routines for each new application.
GDIS
64
Advantages of the Generalized Data Input Systems
1. Improves control by having one common system perform all data validation.
2. Ensures that each AIS application applies a consistent standard for data validation.
3. Improves systems development efficiency.
65
It is where the input data that are validated by the generalized validation module are stored.
Validated data file
66
Performs standard validation routines that are common to many different applications.
Generalized validation module
67
Plays the same role as a traditional error file.
Error file
68
Distributed to users to facilitate error correction.
Error reports
69
A permanent record of all validated transactions.
Transaction log
70
Three categories of processing controls:
1. Run-to-run controls
2. Operator intervention controls
3. Audit trail controls
71
Uses batch figures to monitor the batch as it moves from one program procedure to another.
Run-to-run controls
72
Specific uses of run to run controls:
1. Recalculate control totals.
2. Check transaction codes.
3. Sequence checks
73
This happens when operator manually enters controls into the system
Operator Intervention Controls
74
Examples of operator intervention controls:
1. Entering control totals for a batch
2. Providing parameter values
3. Activating a program
75
Systems that limit operator intervention through operator intervention controls are thus less prone to processing errors.
True
76
To reduce error parameter values and programs start points be derived logically and look-up tables be provided by system.
True
77
Makes sure that every transaction becomes traceable from input to output.
Audit Trail Controls
78
Examples of techniques used to preserve audit trails in computer based accounting systems:
1. Transaction logs
2. Log of automatic transactions
3. Listing of automatic transactions
4. Unique transaction identifiers
5. Error listing
79
Ensures that system output is not lost, misdirected, or corrupted, and that privacy is not violated.
Output controls
80
Output controls ensure that system output is:
- not misplaced or lost
- not misdirected
- not corrupted
- and privacy is not violated
81
Output controls:
1. Output spooling
2. Print programs
3. Bursting
4. Waste
5. Data control
6. Report distribution
7. End user controls
82
Two general approaches in testing computer application controls:
1. Black box (around the computer) approach
2. White box (through the computer) approach
83
Common types of test of controls in the white box approach includes:
1. Authenticity tests
2. Accuracy tests
3. Completeness tests
4. Redundancy tests
5. Access tests
6. Audit trail tests
7. Rounding error tests
84
Used to establish application integrity by processing specially prepared sets of input data through production applications that are under review.
The test data method
85
When the set of test data in use is comprehensive.
Base case system evaluation
86
Performs an electronic walk-through of the application's internal logic.
Tracing
87
The three steps of the tracing procedure:
1. The application under review must undergo a special compilation to activate the trace option.
2. Specific transactions are types of transactions are created as test data.
3. The test data transactions are traced through all processing stages of the program and a listing is produced of all program instructions that were executed during the test.
88
Three primary advantages of test data techniques:
1. They employ through-the-computer testing, thus providing the auditor with explicit evidence concerning application functions.
2. If properly planned test data runs can be employed with only minimal disruption to the organization's operations.
3. They require only minimal computer expertise on the part of auditors.
89
Disadvantages of test data techniques:
1. Auditors must rely on computer services personnel to obtain a copy of the application for test purposes.
2. They provide a static picture of application integrity at a single point in time.
3. Their relatively high cost of implementation, which results in audit inefficiency.
90
An automated technique that enables the auditor to test an application's logic and controls during its normal operation.
The integrated test facility
91
Advantages of integrated test facility:
1. It supports ongoing monitoring of controls as required by SAS 78.
2. Applications with ITF can be economically tested without disrupting the user's operations and without the intervention of computer services personnel.
92
Disadvantage of integrated test facility
The potential for corrupting the data files of the organization with test data.
93
Steps to remedy the disadvantage of ITF:
1. Adjusting entries may be processed to remove the effects of ITF from general ledger account balances.
2. Data files can be scanned by special software that remove the ITF transactions.
94
Requires the auditor to write a program that simulates key features or processes of the application under review.
Parallel simulation
95
Five major components of GDIS:
Generalized validation module
Validated data file
Error file
Error reports
Transaction log
