| What are the two categories of IT Controls? | General Controls - policies and procedures that relate to many applications and support the effective functioning of application controls. They apply to mainframe, miniframe, and end-user environments.
Application Controls - manual or automated procedures that typically operate at a business process level and apply to the processing of transactions by individual applications. Application controls can be preventive or detective and are designed to ensure the integrity of the accounting records. |
| What are the five sub categories under General Controls?
Acronym: 'DAPAS | 1. Data & Network Center
2. Access
3. Program change
4. Application system change
5. System software acquisition |
| What are the three sub categories under Application Controls?
Acronym: 'IPO | 1. Input
2. Processing
3. Output |
| What is an Embedded Audit Module? | A program inserted into the client's system to capture designated transactions, such as large or unusual transactions, for later review by the auditor.
It enables the auditor to continuously test the client's computerized information system. |
| What is Parallel Stimulation? | A computer-assisted auditing technique in which an auditor-written or auditor-controlled program is used to process client data. The results are then compared to those obtained using the client's program and differences are investigated.
This technique enables the auditor to test controls in and processing performed by a client program. |
