ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 173 - IIA-CIA-Part2 discussion

Report
Export

An internal audit activity is planning its first audit of IT shared services. Which of the following controls would typically be evaluated first?

A.
Entity-level controls
Answers
A.
Entity-level controls
B.
Application controls
Answers
B.
Application controls
C.
General controls.
Answers
C.
General controls.
D.
Transaction controls
Answers
D.
Transaction controls
Suggested answer: A

Explanation:

When planning the first audit of IT shared services, it is typical to evaluate entity-level controls first. Entity-level controls are overarching controls that affect the entire organization and are foundational for ensuring that specific application and transaction controls operate effectively. These controls include the organization's governance, risk management processes, and the overall control environment. Assessing entity-level controls provides a broad understanding of the control environment and highlights any pervasive issues that might impact more detailed areas of the audit.

Reference: The IIA's Global Technology Audit Guide (GTAG) and COSO's Internal Control - Integrated Framework.

asked 18/09/2024
Rahul Biradavolu
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first