Chapter 6: Managing IT Audit

TRUE or FALSE

1. The IT audit manager should review the results of the audit before the audit working papers and audit
reports have been completed.

2. Audit follow-up should always be conducted 6 months to a year after the audit report was issued.

3. The audit plan should have a purpose for each task that was to be completed in a sequential order.

4. Management feedback is a very important component of the career development process.

5. The Internet, intranet, or extranet also offers management the ability to pose questions to people or
persons they have never met or even heard of before.

IDENTIFICATION

6. ____________ between audit management and the auditor during this phase can be productive not
only in ensuring an acceptable audit product but also in providing on the on-the-job training and career
development.

7. This is a chance to meet with staff and supervisors and discuss issues and new developments.

8. ____________ is so important to understand that the IS audit and Control Association asks questions
relating to many IT audit, security, and control issues during the CISA Examination.

9. ___________ serve the primary purpose of documenting plans.

10. ___________ is when the auditor is helpful and respectful toward others and encourages their help
and cooperation in the successful completion of audit tasks.

ENUMERATION

11-15. Criterias for assessing the audit

ANSWERS:

TRUE OR FALSE
1. False

2. False

3. True

4. True

5. False

IDENTIFICATION

6.. Effective communication

7. Lunch meeting

8. Risk

9. Planning memos

10. Tact

ENUMERATION

11. Completeness

12. Pertinence

13. Accuracy

14. Appropriate conclusions, findings, and recommendations

15. Follow-up of findings and recommendations