11. You are an IT auditor of UPSA Lovel 400 Limited, a large accounting firm. As part of human resource development plan the company recently arranged overseas training of Computer-Assisted- Audit-Techniques (CAATs) for its IT audit team. You were one of the team members who travelled for CAATs training. When you resumed office after successful completion of training, the senior management of Glorious asked you to transfer CAATs knowledge to its IT Audit team members. In order to conduct knowledge transfer session, you are required to develop a presentation that should include:

i) Applications of CAATs (At least five (5) [ 5 marks]

ii) Four advantages and four disadvantages of CAATs (At least four of each)

Describe the important points in brief.

iii) What are audit productivity tools? How do they assist auditors?

iv) There are various reasons to create Access Control Lists (ACLs). Discuss. What steps are IT auditors to use in ACL data analysis projects? [ 6 marks ]

2. a) Testing is an essential part of the development process. Discuss testing and the elements of a software testing process. Enlist various types of testing. [8 marks ]

b) Explain at least SIX (6) characteristics of a good coded program. [12 Marks]

[12 Marks]

3. a) Audit risk is the risk of information or financial report that may contain material error or IS auditor may not detect an error that has occurred. Explain in brief how would you categorize audit risks? [6 marks]

1. Elaborate on the Sarbanes-Oxley Act? [4 marks]
2. What are audit query and analysis tools? List and explain two such tools. [6 marks]
3. What is the preliminary review portion of an audit and why is this important? [4 marks]