Most AIS today are computer based.Auditing the information system requires the auditors to:
A)Treat the computer as a black box and work around it
B)Recognise the special threats inherent in IT and include these in the audit plan
C)Just look at the manual systems and procedures
D)Employ ethical hackers to audit the computer system

Question

Quizplus · Accepted Answer

Recognizing the special threats inherent in IT and including these in the audit plan is the best choice. Auditors cannot simply treat the computer as a black box and work around it or just look at manual systems and procedures, as they need to understand the computer system to properly audit it. Employing ethical hackers may also be useful, but it is not necessary for all audits. Including IT threats in the audit plan allows auditors to tailor their procedures to address specific risks and vulnerabilities in the AIS.

Most AIS Today Are Computer Based