Quiz

Question 1

The system users would like to do the following changes to an newly-implemented accounting system. As an IS auditor, which of the changes do you think is in the highest priority?

Solution

Fix the issue of generating an incomplete list of fixed assets records

Question 2

The system users would like to do the following changes to an newly-implemented accounting system. As an IS auditor, which of the changes do you think is in the lowest priority?

Solution

Enlarge the description textboxes in the journal entries page for better visibility

Question 3

When auditing the change requests of a point of sale system, you notice 70% of the change requests are related to adaptive maintenance, developers reflect that the effort of implementing the change is huge. As an auditor, what would be your best recommendation to the Management?

Solution

Look for the feasibility of implementing a brand new point of sale system to address the requests

Question 4

Prof. Dias discussed about different system environments used in the change management process in this module. Which of the following is true about the system environments?

Solution

When developers modify the system, there must be a computer-generated audit trail in place, tracking who modified the program and the corresponding timestamp

Question 5

Question 5 A user submitted a change request, which has been approved and well-documented. The developer also followed the change management procedure to make modification in the appropriate system environment and has passed the testing. However, the change does not take place in the production environment of the system eventually. The reason is likely to be ____________________

Solution

The change management board does not approve this change

Question 6

Question 6 The developer has implemented the change request of enhancing the fund transfer functionality in the production environment of an e-Banking system. After an hour, the bank received complaints from customers as they cannot transfer funds, while other modules of the e-Banking system work fine. What would be the immediate step to resolve this issue from the perspective of having good IS controls and governance?

Solution

Reverse only the fund transfer module back to the previous version, following the IT change procedure of the bank

Question 7

You notice the auditee’s financial system contains a tremendous amount of program changes. As an IS auditor, how would you kickstart your audit practice?

Solution

IS auditor should perform random sampling, extracting certain amount of program changes for review

Question 8

“Adding a Simplified Chinese language instruction to the banking system for fulfilling the latest regulatory requirement from the Chinese government” is most probably a kind of ___________ maintenance.

Solution

adaptive

Question 9

“Installing a patch to resolve the file attachment failure in the job application system” is a kind of __________ maintenance.

Solution

corrective

Question 10

Upon system implementation, the system maintenance changes is usually ____________ in nature. As time goes by, more and more system maintenance changes are ___________ in nature instead.

Solution

corrective; adaptive