CISA · Question #82
Which of the following BEST enables an IS auditor to prioritize financial reporting spreadsheets for an end-user computing (EUC) audit?
The correct answer is A. Understanding the purpose of each spreadsheet. To effectively prioritize spreadsheets for an EUC audit, an IS auditor must understand what each spreadsheet is used for, especially its role in financial reporting.
Question
Which of the following BEST enables an IS auditor to prioritize financial reporting spreadsheets for an end-user computing (EUC) audit?
Options
- AUnderstanding the purpose of each spreadsheet
- BAscertaining which spreadsheets are most frequently used
- CIdentifying the spreadsheets with built-in macros
- DReviewing spreadsheets based on file size
How the community answered
(17 responses)- A82% (14)
- B6% (1)
- D12% (2)
Why each option
To effectively prioritize spreadsheets for an EUC audit, an IS auditor must understand what each spreadsheet is used for, especially its role in financial reporting.
Understanding the purpose of each spreadsheet allows the auditor to determine its criticality to financial reporting and business operations, directly enabling prioritization based on financial impact and risk. Spreadsheets crucial for key financial statements or regulatory reporting would be prioritized higher.
Frequency of use doesn't directly indicate the financial impact or criticality of a spreadsheet; an infrequently used but critical spreadsheet could still carry significant risk.
While macros can introduce risk, their presence alone doesn't dictate overall financial reporting criticality compared to the spreadsheet's actual purpose.
File size is generally irrelevant for prioritizing audit scope related to financial reporting risk; a small spreadsheet could contain critical, high-risk data.
Concept tested: EUC audit prioritization criteria
Topics
Community Discussion
No community discussion yet for this question.