Difficulty: Easy
Correct Answer: They must demonstrate strong computer and information-systems control expertise in addition to auditing skills.
Explanation:
Introduction / Context:
Electronic Data Processing (EDP) auditing evaluates controls over information systems, including security, availability, integrity, and compliance. The role blends classic audit techniques with technical knowledge of operating systems, databases, networks, and application controls. Understanding what makes an EDP auditor effective helps organizations reduce risk and strengthen governance.
Given Data / Assumptions:
Concept / Approach:
Modern auditors must evaluate how data is captured, processed, stored, protected, and reported. This requires fluency in IT risks, control frameworks, and tools (e.g., log analysis, data extraction). Therefore, the correct characterization emphasizes combined auditing and computer expertise.
Step-by-Step Solution:
Verification / Alternative check:
Job descriptions and assurance standards consistently require technology proficiency (e.g., understanding authentication, encryption, logging, and change control) alongside traditional sampling and reporting.
Why Other Options Are Wrong:
Common Pitfalls:
Assuming IT audits are just checklist exercises; effective EDP auditing requires evaluating the design and operating effectiveness of controls in complex systems.
Final Answer:
They must demonstrate strong computer and information-systems control expertise in addition to auditing skills.
Discussion & Comments