In a SOC engagement, what is the purpose of the 'System Description'?

Answer options:

To list every single bug in the code.

To describe the boundaries of the system, the infrastructure, software, people, procedures, and data.

To provide a marketing brochure for the company.

To list the auditor's qualifications.

How to approach this question

It defines 'What are we auditing?'.

Full Answer

B.To describe the boundaries of the system, the infrastructure, software, people, procedures, and data.✓ Correct

The System Description (Section III) provides the user with an understanding of the system's components (Infrastructure, Software, People, Procedures, Data) and boundaries so they can understand the context of the controls.

Common mistakes

Thinking it's just a network diagram.

Question 75 All questions Question 77

Practice the full CPA ISC Practice Exam 5

82 questions · hints · full answers · grading

More questions from this exam

Q01A service organization provides a cloud-based payroll processing application to its user entities...Medium Q02An auditor is reviewing the shared responsibility model for a client using an Infrastructure as a...Hard Q03A financial institution requires a cloud deployment model that offers the highest level of contro...Medium Q04During an IT audit, you observe that a company uses a 'Hybrid Cloud' architecture. Which scenario...Medium Q05Which component of IT architecture is primarily responsible for translating domain names (like ww...Easy

View all 82 questions →