ITPEC FE Morning October 2022 Question 60
ITPEC FE Morning October 2022 — Question 60 of 80
A system auditor reviews and examines existing controls — they do not create, establish, or implement them. When auditing access control, the auditor's job is to view and verify that the rules in place are appropriate and being followed.
- •Auditor's role: review, examine, verify, assess
- •NOT auditor's role: create, establish, implement, enforce
Why not others:
- (a) Creating and storing records — this is an administrative or operational task, not an audit activity
- (b) Establishing a policy — policies are set by management, not auditors
- (c) Implementing procedures — implementation is done by IT staff; auditors only verify the results
Key rule: An auditor only reviews — any answer with an action verb like "create," "establish," or "implement" is not an auditor's responsibility.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.