Hard1 markMultiple Choice
CPA · Question 23 · Area I: Information Systems
An auditor is reviewing a population of changes. They select a sample of changes and trace them back to the Change Request tickets. What assertion is the auditor primarily testing?
An auditor is reviewing a population of changes. They select a sample of changes and trace them back to the Change Request tickets. What assertion is the auditor primarily testing?
Answer options:
A.
Completeness
B.
Authorization / Validity
C.
Accuracy
D.
Cutoff
How to approach this question
Direction of testing matters. System -> Paper = Validity. Paper -> System = Completeness.
Full Answer
B.Authorization / Validity✓ Correct
Tracing from the population of implemented changes (system) back to the request (documentation) verifies that the change was valid and authorized. If you went the other way, you'd be testing if authorized changes were actually implemented (completeness).
Common mistakes
Confusing direction of testing (Vouching vs Tracing).
Practice the full CPA ISC Practice Exam 5
82 questions · hints · full answers · grading
More questions from this exam
Q01A service organization provides a cloud-based payroll processing application to its user entities...MediumQ02An auditor is reviewing the shared responsibility model for a client using an Infrastructure as a...HardQ03A financial institution requires a cloud deployment model that offers the highest level of contro...MediumQ04During an IT audit, you observe that a company uses a 'Hybrid Cloud' architecture. Which scenario...MediumQ05Which component of IT architecture is primarily responsible for translating domain names (like ww...Easy
Expert