Isaca Certified Information Systems Auditor CISA Question # 118 Topic 12 Discussion
CISA Exam Topic 12 Question 118 Discussion:
Question #: 118
Topic #: 12
Which of the following is the MOST appropriate testing approach when auditing a daily data flow between two systems via an automated interface to confirm that it is complete and accurate?
A.
Confirm that the encryption standard applied to the interface is in line with best practice.
B.
Inspect interface configurations and an example output of the systems.
C.
Perform data reconciliation between the two systems for a sample of 25 days.
D.
Conduct code review for both systems and inspect design documentation.
The most appropriate testing approach when auditing a daily data flow between two systems via an automated interface is to perform data reconciliation between the two systems for a sample of 25 days. Data reconciliation is a process of verifying that the data transferred from one system to another is complete and accurate, and that there are no discrepancies or errors in the data flow1. Data reconciliation can be performed by using generalized audit software, which is a type of computer-assisted audit technique (CAAT) that allows the IS auditor to perform various audit tasks on the data stored in different file formats and databases2. By performing data reconciliation for a sample of 25 days, the IS auditor can test the reliability and consistency of the data flow over a reasonable period of time, and identify any potential issues or anomalies that could affect the quality of the data or the functionality of the systems.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit