Author: user

W1-2-60-1-6
JOMO KENYATTA UNIVERSITY OF AGRICULTURE AND TECHNOLOGY
University Examinations 2015/2016
YEAR IV SEMESTER II EXAMINATION FOR THE DEGREE OF BACHELOR OF BUSINESS INFORMATION TECHNOLOGY/BIT

BBT 2208:  AUDITING INFORMATION SYSTEM    

DATE:   AUGUST, 2016				        		 TIME:  2 HOURS

INSTRUCTIONS:  	 Answer Question ONE and Any Other TWO Questions.

Question One – 30 Marks

a)	Describe the following audit documents.

i.	Audit charter 	[2 marks]
ii.	Audit plan 	[2 marks]
iii.	Audit report 	[2 marks]

b)	Explain the term information system audit and hot it is different from the general audit.	[4 marks]

c)	Differentiate between general controls and application controls. In your answer include at 	least three general controls and three application controls used in ensuring the security of 	information systems.	[8 marks]

d)	Describe the roles of systems of control in information systems.	[6 marks]

e)	Explain the three major information systems security concerns.	[6 marks]

Question Two – 20 Marks

a)	What are the major benefits to be gained by an organization on carrying out an information system audit?	[8 marks]

b)	Discuss any six major elements of an information system audit.	[12 marks]

Question Three – 20 Marks

a)	Explain the following types of controls used in securing information systems.		[6 marks]

i.	Detective controls 
ii.	Preventive controls 
iii.	Corrective controls 

b)	Describe any three major requirements that an information system auditor should meet in 	order to carry out his work efficiently.	[6 marks]

c)	Audit technique are understood to be all methods used to determine the facts of the 	matter. State eight auditing techniques.	[8 marks]

Question Four – 20 Marks

a)	Describe the major phases of an IS audit.	[8 marks]

b)	Differentiate between the three information system auditing approaches.	[12 marks]