Audit Planning and Risk Assessment CISA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the audit universe?

   • AThe complete set of auditable entities within an organization
   • BThe list of audit findings from the most recent engagement
   • CThe group of external auditors who review the organization
   • DThe collection of audit tools and software used by the audit team
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which type of control requires the auditor to test both the automated logic and the manual processes that depend on it?

   • ACompensating control
   • BAutomated control
   • CManual control
   • DIT-dependent control
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An internal audit department has a limited budget and must select audit engagements for the year. The audit universe includes a high-risk IT system that was audited last year with minor findings, a medium-risk business process that has not been audited in five years, and a low-risk compliance area that is required by regulation. The audit committee wants to ensure that the audit plan addresses both risk and regulatory requirements. Which of the following is the BEST approach to select the engagements?

   • AAudit the compliance area because it is required by regulation, and defer the other areas.
   • BAudit the medium-risk business process because it has not been audited in five years, and defer the high-risk system.
   • CPrioritize the compliance area due to regulatory requirement, then the medium-risk process due to the long time since last audit, and consider the high-risk system for a limited-scope review.
   • DAudit the high-risk IT system again because it is the highest risk, and defer the other areas.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An auditor discovers that a control only identifies errors after they have occurred. What type of control is this?

   • APreventive control
   • BDetective control
   • CCompensating control
   • DCorrective control
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of monitoring audit progress against the plan?

   • ATo evaluate the performance of the auditee
   • BTo prepare the final audit report
   • CTo assign audit staff to tasks
   • DTo ensure the audit stays on schedule and within scope
   Reveal Solution Discussion Select an answer first