TYMCA (COMMERCE): SEM-V

503: INFORMATION SYSTEM AUDIT

UNIT 01: Concepts of Governance and Management of information System

2 MARKS 1) What is Governance?

4 MARKS 1) Explain Governance & its key objectives.
2) What is IT Governance and Corporate Governance? Explain each point in detail.
3) What is information? What are the characteristics of effective and useful
information?
4) COBIT % 5 A GEIT Framework.

UNIT 02: Information System Concept

4 MARKS 1) Explain various types of business applications.

UNIT 03: Protection of Information System

2 MARKS 1) How to protect your Information? Write any four examples.

2) Write short note on Cyber frauds.
4 MARKS 1) Why information security is important? Discuss in detail.
2) What is cyber fraud? Explain in detail.

UNIT 04: Auditing of Information Systems

2 MARKS 1) Explain IS Audit.

2) What is Logical Access Control?
4 MARKS 1) Explain different IS control based on nature of controls.
2) Describe the following general controls:
i. Organization controls.
ii. Financial controls.

UNIT 05: Business Continuity Planning and Disaster Recovery Planning

2 MARKS 1) Explain what are the types of plan (Back up)?

4 MARKS 1) What is need of Business Continuity Management [BCM].
2) Why a business continuity plan is important for an organization?
3) Developing BCP plan. Explain each phase in detail.
 4) Describe the audit of BCP/DRP.

UNIT 06: Acquisition, Development and Implementation of Information System

4 MARKS 1) What are the system development methodologies? Explain each in detail.
2) What activities are parts of System Development Life Cycle (SDLC)? Explain
Briefly.
3) Explain different phases of SDLC with diagram.
4) Explain Auditors role in SDLC.

UNIT 07: Information Technology Regulatory Issues

4 MARKS 1) Note on: The IT Act and its objectives.

2) What are the objectives of Information Technology Amendment Act, 2008?
3) Difference between digital signature and logical signature.
4) What is digital signature? How it is used for the Authentication of Electronic
Record?
5) Explain the components of security policy.

UNIT 08: Emerging Technologies

2 MARKS 1) Usage of mobile computing.
2) Define Green IT.
4 MARKS 1) Explain cloud computing with diagram.
2) What is the difference between cloud computing and Grid computing?
3) Explain mobile computing and its benefits.

OTHER QUESTIONS:
2 MARKS 1) Define IT strategy planning.
2) Examples of social media.
4 MARKS 1) Explain social media web 2.0 in detail.