Question

The nature of the client's IT system will affect the risks that management must confront in designing controls for the system. In assessing the risks of material misstatement, the auditors should identify these risks and evaluate the effectiveness of the related controls in mitigating those risks. Auditors assess the risks of material misstatements by using all the audit evidence obtained on the client and its environment, including its internal control. When assessing the risks of material misstatement, the auditors should identify these risks and evaluate the effectiveness of the related controls in mitigating those risks in an IT environment. Use your cursor to match each example of a typical risk with the control that may be used to mitigate the risk in an IT environment Introduction of unauthonzed data of programs Physical and user controls Introduction of unauthorized data or programs Control over access and backup copies Destruction of infrastructure or data Program and user controls Unauthorized changes

Answer 1

Physical and user controls	Unauthorized access to data or programs , Destruction of infrastructure or data
Controls over access and backup copies	Unauthorized changes
Program and user controls	Unauthorized changes; destruction of data
Firewalls and password systems	Unauthorized changes to data or programs; introduction of unauthorized data or programs;
Physical controls over terminals and testing of user programs and applications	Unauthorized access to data or programs