D217 Module 1 Study Guide Questions

What is a key challenge in defining the scope of AIS as an academic discipline?

Unlike other accounting areas, AIS lacks a well-defined body of knowledge, leading to disagreements among faculty about the appropriate course content.

How did the Sarbanes-Oxley Act (SOX) of 2002 impact the field of AIS?

SOX established new corporate governance regulations and internal control standards for public companies, which has significantly impacted what is taught in AIS courses, making it a required area of study

Distinguish between external and internal users of accounting information.

External users include those outside the organization like investors and creditors, whereas internal users are within the company, such as management and operations personnel.

Explain the difference between data and information in the context of an AIS.

Data are raw facts without a direct effect on a user's actions, while information is processed data that causes a user to take an action they otherwise would not have taken.

What are the two primary rules governing the design of data collection procedures?

The two rules are relevance, where only data that contributes to useful information should be captured, and efficiency, where data should be captured only once and used by many.

Why is data collection considered a crucial stage in an AIS?

Data collection is crucial because errors undetected at this stage will propagate through the system, leading to inaccurate outputs and poor user decisions.

Describe the three fundamental tasks of database management.

The three tasks are storage, which assigns keys to new records and stores them; retrieval, which locates and extracts existing records; and deletion, which permanently removes obsolete records.

List five characteristics that contribute to the usefulness of information generated by an AIS.

The five characteristics are relevance, timeliness, accuracy, completeness, and summarization.

What is the role of a primary key in a database record?

A primary key is a unique identifier attribute within a database record that allows it to be specifically and easily located among other records

How does feedback function within the context of an information system?

Feedback is output that is sent back to the system as a data source to initiate or alter a process, and it may be internal or external to the organization.

Describe the main difference between centralized and distributed data processing models.

Centralized data processing uses one or more large computers in a central location to process data, while distributed data processing allows users to process transactions locally with their own IT resources. Centralized systems promote intra-organizational sharing, while distributed systems operate more independently.

What are the two primary ways organizations acquire information systems?

Organizations can acquire information systems by purchasing commercial software or by developing custom systems in-house from scratch. Commercial software is readily available, while custom systems are tailored to specific organizational needs.

Why might an organization choose to develop a custom software system over buying commercial software?

Organizations might choose to develop custom software when their information needs are unique and cannot be adequately met by commercial packages, even with available modules. This is often the case for organizations in highly competitive or specialized industries.

What are the major responsibilities of systems maintenance?

Systems maintenance involves making changes to existing systems to accommodate evolving user needs. These changes can range from minor modifications, like adding a report, to major overhauls to incorporate new rules.

What is the role of database administration in an organization?

Database administration is responsible for the security and integrity of the database, especially in centrally organized companies where the database is shared by multiple users. They safeguard the data and ensure its accessibility to authorized individuals.

What are the main responsibilities of network administration?

Network administration is responsible for the effective functioning of the organization's network, including configuring, implementing, and maintaining network equipment. They also monitor activity to ensure compliance with company policies and protect against cyber threats.

What is IT outsourcing and why do companies engage in it?

IT outsourcing involves a company selling its IT resources to a third-party vendor and then leasing IT services back, allowing the company to reduce costs and administrative burdens associated with managing IT. This strategy allows companies to focus on core competencies while the vendor handles the IT infrastructure.

Explain the concept of cloud computing.

Cloud computing involves accessing hosted IT services over the Internet from shared data centers, like SaaS, IaaS, or PaaS. Organizations pay for the IT resources they use, which provides access to computing power and flexibility without the need for extensive internal infrastructure.

What is a 'turnkey system' in the context of software procurement?

A 'turnkey system' refers to commercial software packages that can be implemented with little or no modification by the user. These systems are designed to be readily usable off-the-shelf, and they often require minimal setup by the purchasing company.

What is a significant disadvantage of custom software development?

Custom software is usually more expensive than commercial software because the developing company must absorb all the development costs, rather than the vendor spreading these costs over a wide user base. The company must also commit substantial resources, time, and personnel to develop and implement a custom system.

What are the three main types of audits discussed in the text?

The three main types of audits discussed are external (attestation) audits, internal (operational) audits, and fraud audits. Each type serves a different purpose, from providing assurance on financial statements to investigating potential fraudulent activities

Explain the primary objective of an external audit.

The primary objective of an external audit is to provide an opinion on the fair presentation of a company's financial statements. This assurance is provided through an independent attestation of the information system’s internal controls and data.

What is the concept of "auditor independence" and why is it crucial in external audits?

Auditor independence is the freedom from any influences that might compromise an auditor's judgment regarding a client's financial position. This concept is critical because it ensures the objectivity and credibility of the audit report for stakeholders.

How did the Sarbanes-Oxley Act (SOX) impact the relationship between accounting firms and their clients regarding advisory and attest services?

The Sarbanes-Oxley Act (SOX) significantly limited the types of non-audit services that auditors can provide to their audit clients. This separation aimed to protect auditor independence and reduce conflicts of interest

What is the main purpose of an internal audit?

The main purpose of an internal audit is to evaluate and examine an organization's activities. This can include financial audits, IT audits, compliance evaluations, operational efficiency assessments, and detection of fraud.

Who do internal auditors typically report to within an organization?

Internal auditors typically report to executive management or the audit committee of the board of directors. This reporting structure allows the internal audit function to operate with some independence from management.

Explain how the concept of “independence” differs between internal and external auditors.

External auditors represent outsiders like stockholders and the public and are thus independent of the organization. Internal auditors, while aiming for objectivity, represent the interests of the organization and are ultimately employed by it.

What are fraud audits designed to investigate?

Fraud audits are designed to investigate anomalies and gather evidence of fraud that could lead to criminal conviction. They are often initiated when employee or executive fraud is suspected within an organization.

What is the role of the audit committee in publicly traded companies, and how has SOX impacted this role?

The audit committee, composed of outside members with at least one financial expert, provides oversight of both internal and external audits and acts as a liaison between the two. SOX changed their role, giving the committee the power to hire and fire external auditors and resolve disputes with management.

How do the roles of system designer and auditor intersect and why is an understanding of both needed?

System design and auditing are interconnected, as accountants need to understand system design to effectively audit its controls and vice-versa. This understanding facilitates evidence extraction for audit purposes and promotes more effective system design by considering audit risks.