Auditing - Ch. 12

Front 1

Application Controls

Back 1

Controls related to a specific use of IT, such as the inputting, processing, and outputting of sales or cash receipts

Front 2

Application Service Providers (ASPs)

Back 2

A third-party entity that manages and supplies software applications or software-related services to customers through the Internet

Front 3

Auditing Around the Computer

Back 3

Auditing without relying on and testing controls embedded in computer application programs, which is acceptable when the auditor has access to docs.+rec.

Front 4

Auditing Through the Computer

Back 4

Auditing by testing computer-performed internal controls and account balances electronically, generally because exist. of strong GC

Front 5

Database Management systems

Back 5

Hardware and software systems that allow clients to establish and maintain databases shared by multiple application

Front 6

Digital Signatures

Back 6

Electronic certificates that are used to authenticate the validity of individuals and companies conducting business electronically

Front 7

Embedded Audit Module Approach

Back 7

A method of auditing transactions processed by IT whereby the auditor embeds a module in the client's app. system to capture tran. int. A

Front 8

Encryption Techniques

Back 8

Computer programs that transform a standard message into a coded form that is decoded by the recipient using a decryption program

Front 9

Firewall

Back 9

A system of hard+software that monitors + controls the flow of E-Commerce comm. by channeling all network connections through a control gateway

Front 10

General Controls

Back 10

Controls that relate to all parts of the IT function

Front 11

Generalized Audit Software (GAS)

Back 11

Computer programs used by auditors that provide data retrieval, data manipulation, and reporting capab. spec. oriented to auditor's needs

Front 12

Hardware Controls

Back 12

Controls built into the computer equipment by the manufacturer to detect and report equipment failure

Front 13

Input Controls

Back 13

Controls designed by an organization to ensure that the information to be processed by the computer is autorized, accurate, and complete

Front 14

Local Area Networks (LANs)

Back 14

Networks that conect computer equipment, data files, software, and peripheral equip. within a local area, such as a building, cluster, for intraCo. use

Front 15

Output Controls

Back 15

Contorls designed to ensure that computer-generated data are valid, accurate, complete, and distributed only to authorized people

Front 16

Parallel Simulation Testing

Back 16

An audit testing strategy that involves the auditor's use of audit software, either purchased or programmed by the auditor, to replicate some part of C. appsys

Front 17

Parallel Testing

Back 17

A company's computer testing strategy that involves operating the old and new systems simultaneously

Front 18

Pilot Testing

Back 18

A company's computer testing strategy that involves implementing a new system in just one part of the org., while old sys. is @ other locations

Front 19

Processing Controls

Back 19

Controls designed to ensure that data input into the system are accurately and completely processed

Front 20

Service Center

Back 20

An organization that provides IT service for companies on an outsourcing basis

Front 21

Test Data Approach

Back 21

A method of auditing an IT system that uses the auditor's test data to determine whether the client's computer program can correctly process V/IV trans

Front 22

Wide Area Networks (WANs)

Back 22

Networks that connect computer equipment, databases, software, and peripheral equipment that reside in many geographic locs., such as client offices in world