IT Service Management and Systems Audit

Which audit technique sets up a fictitious customer account for audit purposes in a sales system and processes audit data against that account at the same time as normal business processing, in order to check the results?

  1. ASnapshot method
  2. BITF method
  3. CTracing method
Show answer and explanation

Answer: B. ITF method

The ITF (integrated test facility) method sets up fictitious accounts or departments for audit purposes in the production system and has audit data processed together with production processing, then checks the results. It allows continuous checking in the production environment as it is, but a procedure for removing the audit data afterward must be defined so that they do not affect production totals and the like. The snapshot method writes out and examines data midway through processing, and the tracing method traces and records the path along which a particular transaction was processed and examines it.

  • A. This technique writes out and examines data midway through processing at particular places in a program.
  • B. Correct. Fictitious audit accounts are set up in the production system and audit data are processed against them.
  • C. This technique traces and examines the path along which a particular transaction was processed (such as the sequence of instructions executed).
Practice this topic Back to topic

Books on IT Service Management and Systems Audit Ad

As an Amazon Associate I earn from qualifying purchases.

More IT Service Management and Systems Audit questions

  1. A systems auditor used generalized audit software to extract duplicated invoice numbers and transactions over the approval limit from a year's worth of transaction data (several million records) in a sales system. Which of the following is an appropriate advantage of using computer-assisted audit techniques (CAAT) in this way?
  2. In a systems audit, which of the following does the systems auditor mainly use as the yardstick for judging whether an organization's management of its information systems is appropriate?
  3. In the framework of Japan's internal control reporting system under the Financial Instruments and Exchange Act (J-SOX), which of the following is one of the four objectives of internal control?
  4. Among the basic components of internal control, which of the following describes the control environment appropriately?
  5. In internal control over purchasing, which of the following is an appropriate measure in line with segregation of duties?