30 Which of the following is correct concerning system and organization controls (SOC) reports? Multiple Choice They all result in restricted-use reports. A prerequisite before issuing such a report is having performed the audit of the service organization's financial statements. Some of these reports do not address operating effectiveness. They all relate to controls at service organizations.

30 Which of the following is correct concerning system and organization controls (SOC) reports? Multiple Choice They all result in restricted-use reports. A prerequisite before issuing such a report is having performed the audit of the service organization's financial statements. Some of these reports do not address operating effectiveness. They all relate to controls at service organizations.

Auditing: A Risk Based-Approach (MindTap Course List)

11th Edition

ISBN:9781337619455

Author:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Publisher:Karla M Johnstone, Audrey A. Gramling, Larry E. Rittenberg

Chapter3: Internal Control Over Financial Reporting: Responsibilities Of Management And The External Auditor

Section: Chapter Questions

Problem 28CYBK

See similar textbooks

Similar questions

23. Which of the following are common issues with benchmarking tool used by internal auditors? Group of answer choices Benchmarking information is often proprietary and organizations are reluctant to share it with other organizations. Benchmarking need face-to-face contact or discussion with other organizations Benchmarking can show areas of excellence within the organization but internal audits should focus on exception-based reporting Typical metrics used in benchmarking are time, quality, and cost
Select each attribute with the most directly related term. No term is used more than once. Attributes 1. Likelihood a misstatement will not be prevented or detected 2. Substantive procedures and tests of controls 3. Likelihood of misstatement assuming no controls 4. Reporting on internal control and financial statements 5. Creates a reasonable possibility a material misstatement will not be detected 6. Inquiries, analytical procedures, observation 7. Merits attention, less than a material weakness 8. GAAP 9. Inquire, inspect, observe, reperform 10. Follow a transaction through the system Term
Which of the following is not a common procedure for assessing operating effectiveness of preventive controls? a. Observation of personnel b. Analysis of trends or ratios c. Inspection of documents d. Inquiries of management
5. Which of the following is not a risk in a computerized information system (CIS) a. need for CIS experienced staff b. separation of CIS duties from accounting functions c. improved audit trail d. hardware and data vulnerability Required: choose the correct answer and Justify your answers in at least 6 sentences.
Which of the following categories is not relevant as the audit team inquires with management regarding their internal control system? Multiple Choice О policies and procedures vacation policy development of control activities information technology
1. If detective controls signal error flags, why shouldn’t these types of controls automatically make a correction in the identified error? Why are corrective controls necessary? 2. Discuss the nonaccounting services that external auditors are no longer permitted to render to audit clients. 3. Discuss whether a firm with fewer employees than there are incompatible tasks should rely more heavily on general authority than specific authority. 4. According to SAS 78/COSO, the proper segregation of functions is an effective internal control procedure. Please Discuss. PLEASE NO PLAGIARSIM. THANK YOU!!
The difference between assessing control risk for IT control activities versus assessing control risk for manual control activities is best described as follows: Multiple Choice О in a manual environment it is important for the auditor to gain an understanding of the internal control activity before assessing control risk. О in an IT environment, it is not important to gain an understanding of the internal control activity before assessing control risk. О In an IT environment, it is likely that control risk will be assessed as low on largely all audit engagements. О the assessment process that needs to be undertaken for IT controls is essentially the same as would be taken for manual controls.
1. 1. Working paper documentation includes the auditors’ conclusion about ______ and the basis for their conclusion. a. control risk b. control expecations 2. _____ are controls that do not rely on the client's information technology (IT) environment for their operation. a. IT general controls (ITGCs) b. Automated controls c. Computer application controls d. Manual controls 3. Assessing control risk begins with understanding entity-level controls. a. True b. False
An auditor’s preliminary control risk assessment is at a high level. Which of the following are possible reasons for this preliminary assessment? The entity’s internal control system is not effective. Evaluating the effectiveness of the entity’s control system would not be efficient. Group of answer choices A. I only B. Neither I and II C. Both I and II D. II only
Which of the following is NOT a general control?* a. Backup of live data b. Use of passwords c. Setting an acceptable range for working hours d. Calamity-proof IT facilities ABOUT AUDITING/ACCOUNTING TOPICS
Which of the following are common issues with benchmarking tool used by internal auditors? Benchmarking need face-to-face contact or discussion with other organizations O Benchmarking information is often proprietary and organizations are reluctant to share it with other organizations. Benchmarking can show areas of excellence within the organization but internal audits should focus on exception-based reporting O Typical metrics used in benchmarking are time, quality, and cost
An auditor's preliminary control risk assessment is at a high level. Which of the following are possible reasons for this preliminary assessment? 1. The entity's internal control system is not effective. 2. Evaluating the effectiveness of the entity's control system would not be efficient. Choices: a. I only b. II only c. Both I and II d. Neither I and II