Audit Planning & Methodology Flashcards
7 cards from real ITA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Audit Planning & Methodology flashcards as text
What is the primary purpose of an IT audit planning phase?
Answer: To define audit scope, objectives, and resource requirements
The planning phase establishes the scope, objectives, and resource needs that guide all subsequent audit activities.
Which document formally authorizes an IT audit and defines its boundaries?
Answer: Audit charter or engagement letter
An audit charter or engagement letter grants authority to the audit team and defines the scope, objectives, and limits of the audit.
In IT auditing, a 'risk-based approach' to planning means that:
Answer: Audit resources are focused on areas with the highest risk to the organization
A risk-based approach allocates audit resources to areas where risks are greatest, maximizing audit effectiveness and value.
Which of the following best describes an audit's 'materiality threshold'?
Answer: The level at which a misstatement or control weakness would affect decision-making
Materiality defines the significance level at which a control weakness or finding would be important enough to influence stakeholder decisions.
What is the main purpose of conducting a preliminary survey during IT audit planning?
Answer: To gain an understanding of the auditee's environment, systems, and processes
A preliminary survey helps auditors understand the auditee's IT environment so they can design appropriate audit procedures and identify key risk areas.
Which of the following is a key element of an IT audit program?
Answer: Specific audit steps and procedures aligned with audit objectives
An audit program documents the specific steps and procedures the auditor will follow to achieve the defined audit objectives.
Why is understanding an organization's IT governance framework important during audit planning?
Answer: It helps the auditor identify control requirements and accountability structures to evaluate
IT governance frameworks define control requirements, oversight structures, and accountability that the auditor uses to evaluate the adequacy of controls.