Test your basic knowledge |

CISA Certified Information Systems Auditor Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Any intentional violation of the security policy of a system






2. An eight-bit code representing 256 characters; used in most large computer systems






3. Memory reserved to temporarily hold data. Buffers are used to offset differences between the operating speeds of different devices; such as a printer and a computer. In a program; buffers are reserved areas of RAM that hold data while they are being






4. A system development methodology that is organised around ''objects'' rather than ''actions;' and 'data ' rather than 'logic.' Object-oriented analysis is an assessment of a physical system to determine which objects in the real world need to be repr






5. The process of determining what types of activities are permitted. Ordinarily; authorisation is in the context of authentication: once you have authenticated a user; he/she may be authorised to perform different types of access or activity






6. A card reader that reads cards with a magnetizable surface on which data can be stored and retrieved






7. Detection on the basis of whether the system activity matched that defined as abnormal






8. A private key cryptosystem published by the National Bureau of Standards (NBS); the predecessor of the US National Institute of Standards and Technology (NIST). DES has been used commonly for data encryption in the forms of software and hardware impl






9. A method of selecting a portion of a population; by means of mathematical calculations and probabilities; for the purpose of making scientifically and mathematically sound inferences regarding the characteristics of the entire population






10. The possibility of an act or event occurring that would have an adverse effect on the organization and its information systems






11. The process of actually entering transactions into computerized or manual files. Such transactions might immediately update the master files or may result in memo posting; in which the transactions are accumulated over a period of time; then applied






12. The act of transferring computerized information from one computer to another computer






13. 1) Two or more networks connected by a router 2) The world's largest network using TCP/IP protocols to link government; university and commercial institutions






14. A physical control technique that uses a secured card or ID to gain access to a highly sensitive location. Card swipes; if built correctly; act as a preventative control over physical access to those sensitive locations. After a card has been swiped;






15. A mathematical expression used to calculate budget amounts based on actual results; other budget amounts and statistics. With budget formulas; budgets using complex equations; calculations and allocations can be automatically created.






16. An interactive system that provides the user with easy access to decision models and data; to support semistructured decision-making tasks






17. An electronic form functionally equivalent to cash in order to make and receive payments in cyberbanking






18. Editing ensures that data conform to predetermined criteria and enable early identification of potential errors.






19. A document that confirms the client's and the IS auditor's acceptance of a review assignment






20. First; it denotes the planning and management of resources in an enterprise. Second; it denotes a software system that can be used to manage whole business processes; integrating purchasing; inventory; personnel; customer service; shipping; financial






21. Wiring devices that may be inserted into communication links for use with analysis probes; LAN analyzers and intrusion detection security systems






22. The risk that an error which could occur in an audit area; and which could be material; individually or in combination with other errors; will not be prevented or detected and corrected on a timely basis by the internal control system






23. The specific information subject to the IS auditor's report and related procedures which can include things such as the design or operation of internal controls and compliance with privacy practices or standards or specified laws and regulations.






24. A system of interconnected computers and the communications equipment used to connect them






25. A flag set in a packet to indicate to the sender that the previous packet sent was accepted correctly by the receiver without errors; or that the receiver is now ready to accept a transmission






26. An authentication protocol; often used by remote-access servers






27. Modern expression for organizational development stemming from IS/IT impacts. The ultimate goal of BPR is to yield a better performing structure; more responsive to the customer base and market conditions; while yielding material cost savings. To ree






28. A mathematical key (kept secret by the holder) used to create digital signatures and; depending upon the algorithm; to decrypt messages or files encrypted (for confidentiality) with the corresponding public key






29. A deficiency in the design or operation of a control procedure. Control weaknesses can potentially result in risks relevant to the area of activity not being reduced to an acceptable level (relevant risks are those that threaten achievement of the ob






30. The application of audit procedures to less than 100 percent of the items within a population to obtain audit evidence about a particular characteristic of the population






31. Processing is achieved by entering information into the computer via a video display terminal. The computer immediately accepts or rejects the information; as it is entered.






32. Range checks ensure that data fall within a predetermined range (also see limit checks).






33. The electronic transmission of transactions (information) between two organizations. EDI promotes a more efficient paperless environment. EDI transmissions can replace the use of standard documents; including invoices or purchase orders.






34. The organization using the outsourced service






35. The process of electronically inputting source documents by taking an image of the document; thereby eliminating the need for key entry






36. Audit evidence is useful if it assists the IS auditors in meeting their audit objectives.






37. A low-level computer programming language which uses symbolic code and produces machine instructions






38. A biometric device that is used to authenticate a user through palm scans






39. An edit check designed to ensure the data in a particular field is numeric






40. Common path or channel between hardware devices. It can be between components internal to a computer or between external computers in a communications network.






41. Software used to create data to be used in the testing of computer programs






42. In vulnerability analysis; gaining information by performing standard system status queries and inspecting system attributes






43. Unusual or statistically rare






44. A stored collection of related data needed by organizations and individuals to meet their information processing and retrieval requirements






45. These controls are designed to prevent or restrict an error; omission or unauthorized intrusion.






46. A communications channel over which data can be sent and received simultaneously






47. Considered for acquisition the person responsible for high-level decisions; such as changes to the scope and/or budget of the project; and whether or not to implement






48. The total of any numeric data field on a document or computer file. This total is checked against a control total of the same field to facilitate accuracy of processing.






49. A flag set in a packet to indicate that this packet is the final data packet of the transmission






50. A file of semipermanent information that is used frequently for processing data or for more than one purpose