You are on page 1of 1

TIA3121 Information Systems Audit

Tutorial 1
1. Describe the meaning of organization risks.
2. How would IT create opportunities or risks?
3. Why is there a need for control and audit of computer systems?
4. How can inadequate controls in a computer system lead to an incorrect decision
making?
5. Describe black hat and white hat.
6. In the lectures Amazons case, how did the software error occur?
7. Explain the differences between a preventive control, a detective control, and a
corrective control.
8. What is the relationship between financial and IS audit?
9. IS auditors often have specific technical skills such as ERP or e-business. Explain
how an IS auditor could acquire and maintain knowledge about the specific software
package.
10. CISA is the most common qualification. How would this certification add value for
someone practicing IS auditing.

You might also like