IT Service Management and Systems Audit

Monitoring, a basic component of internal control, consists of ongoing monitoring and independent evaluations. Which of the following is an independent evaluation?

  1. AThe accounting section manager checks, as part of daily work, the results of the payment reconciliations carried out by subordinates
  2. BOn the order entry screen, the system automatically checks the number of digits in amounts and the required fields
  3. CAn internal audit department independent of the business periodically evaluates the status of the design and operation of internal control
Show answer and explanation

Answer: C. An internal audit department independent of the business periodically evaluates the status of the design and operation of internal control

Monitoring is the process of continuously evaluating whether internal control is working effectively. Ongoing monitoring is built into normal business activities and carried out continuously; checks by supervisors are an example. Independent evaluations are carried out periodically or as needed, separately from ongoing monitoring, from a standpoint independent of the business; evaluations by the internal audit department and audits by corporate auditors are examples. Input checks by the system are control activities (controls over business processing that use IT).

  • A. This is a check by a supervisor within normal work, so it is ongoing monitoring.
  • B. This is an input check, a control activity that uses IT.
  • C. Correct. It is a periodic evaluation by a department independent of the business, so it is an independent evaluation.
Practice this topic Back to topic

Books on IT Service Management and Systems Audit Ad

As an Amazon Associate I earn from qualifying purchases.

More IT Service Management and Systems Audit questions

  1. Within the "response to IT" in internal control, which of the following is an IT general control?
  2. Which of the following describes the approach of IT service management appropriately?
  3. Which of the following is a document in which an IT service provider collects the list of IT services that users can choose and use, together with the description of each, its conditions of use, its standard service levels and how to request it or make inquiries?
  4. To achieve the service levels promised to users in an SLA, an IT service provider agrees with the network operations department and other departments within the same organization on the content and level of the work each is responsible for. Which of the following is this agreement?
  5. Which of the following is the most appropriate service level item to agree on with users in the SLA for a company's internal expense reimbursement system?