Detective control You try to infiltrate your own firewall and present an analysis of vulnerabilities

Detective control You try to infiltrate your own firewall and present an analysis of vulnerabilities (i.e. penetration test is an example of a ____ control) Input control Sequentially pre-numbered forms is an example of an ___ control Batch Totals serves as a DATA ENTRY control by summarizing key values for a batch of input records Input Control A turnaround document is an example of an ___ control Intrusion Prevention System Security technology uses IP packet traffic to identify attacks File labels ensure the most CORRECT and CURRENT files are being updated Detective control Duplicate

View complete question Detective control You try to infiltrate your own firewall and present an analysis of vulnerabilities (i.e. penetration test is an example of a ____ control) Input control Sequentially pre-numbered forms is an example of an ___ control Batch Totals serves as a DATA ENTRY control by summarizing key values for a batch of input records Input Control A turnaround document is an example of an ___ control Intrusion Prevention System Security technology uses IP packet traffic to identify attacks File labels ensure the most CORRECT and CURRENT files are being updated Detective control Duplicate checking is an example of a ___ control Corrective control Resubmitting rejected ideas are an example of a ___ control Employee master file If you want to update information about a specific employee (includes payroll, address, etc) you would edit the ______ Electronic data interchange technology used to exchange/communicate electronic invoices, payments, and info among suppliers, manufacturers and retailers Segregation of Duties Having marketing and credit approval departments check customer credit availability is an example of ____ Manual operation Flowchart: updating an employee file is a ___ operation Manual Operation Flowchart: preparing payroll checks is a ___ operation Turnaround Doc (remittance advice) The most efficient/accurate way to process payments when billing a lot of customers is by using a ___ Activity (event), Resources, People (agents) (REA) The 3 facets of business are… Defaced and Stored if a document is subject to “cancellation and storage”, it will be ___ and ___ Vulnerability Scan uses automated tools to identify whether a system possesses any well-known security problems all publicly held companies SOX applies to… COSO-ERM control objective that deals with specification of objectives and uncertainties of future plans Closed-loop verification matching account numbers with information about the entity to ensure correct accounts Preventative Detective + Corrective What is the formula for adequate control activities Input fraud which is the easiest form of fraud Authentication Establishes the identity of a user Residual risk The risk that still remains after internal controls Hardening turning off unnecessary program features Detective Control Log analysis (examine logs to identify possible attacks) is a ___ control Inherent and Strategic COSO-ERM says that risk management is __ and __ Transmission control protocol File transfer protocol; includes packets being sent over the internet operations objectives Deal with the effectiveness and efficiency in ERM (may regard performance and profitability) Data transmission control Parity checks count computer bits as odd/even to ensure nothing was lost during a transfer; this is an example of a ___ control Data entry controls Error logs and reviewing are examples of ___ controls Patch Management Deciding how to manage software updates (weigh pros/cons of different options) is an example of…. Internal Environment the SEC and FASB affect the ___ environment General Authorization If customers try to make purchases or returns and are within the terms of agreement/credit, they possess ___ authorization Record count Sums the number of records in a batch Pressure, rationalization, opportunity 3 elements of the fraud triangle? Output control User review consists of users examining output for reasonableness, completeness, and designation; this is a __ control Access Control Matrix matches system users to the access they are allowed Design effectiveness, operating effectiveness What are the 2 deficiencies under AS5? Incremental backup only backs up data that occurred since the last backup Blanket purchase arrangement to purchase items from a supplier for a fixed period of time Capture data on source documents First step of transaction processing? Threat=theft, control=segregation of duties/minimal cash handling What are a threat/control associated with loss of assets? Decision Flowchart: diamond represents… HRM provides info on hiring/termination/pay Balance forward Used by credit card companies for A/R management; customers typically pay according to monthly statement rather than invoice Use approved suppliers, find competitive bids examples of ways to prevent paying too much for something? XBRL (XML based) clients can tag themselves, communicates financial data, unique tags used is not/controller in the revenue cycle, a/r clerk *is/is not* involved in cash handling and reports to ___ transfer of legal property when does accounting acknowledge a sale? Vendor-managed inventory manufacturer tracks/forecasts/produces based on demand; retailer just sells intact and daily deposits should be made ___ and ___ Purchase order, receiving report If you use ERS in the expenditure cycle, the only documents required are ___ and ___

View less