1. A company has implemented a new client-server enterprise resource planning (ERP) system. Local branches transmit customer orders to a central manufacturing facility. Which of the following would BEST ensure that the orders are entered accurately and the corresponding products are produced?

A) Verifying production to customer orders
B) Logging all customer orders in the ERP system
C) Using hash totals in the order transmitting process
D) Approving (production supervisor) orders prior to production



2. When two or more systems are integrated, input/output controls must be reviewed by an IS auditor in the:

A) systems receiving the output of other systems.
B) systems sending output to other systems.
C) systems sending and receiving data.
D) interfaces between the two systems.



3. An IS auditor who has discovered unauthorized transactions during a review of EDI transactions is likely to recommend improving the:

A) EDI trading partner agreements.
B) physical controls for terminals.
C) authentication techniques for sending and receiving messages.
D) program change control procedures.



4. An IS auditor recommends that an initial validation control be programmed into a credit card transaction capture application. The initial validation process wouldMOST likely:

A) check to ensure that the type of transaction is valid for the card type.
B) verify the format of the number entered then locate it on the database.
C) ensure that the transaction entered is within the cardholder's credit limit.
D) confirm that the card is not shown as lost or stolen on the master file.



5. A company has recently upgraded its purchase system to incorporate EDI transmissions. Which of the following controls should be implemented in the EDI interface to provide for efficient data mapping?

A) Key verification
B) One-for-one checking
C) Manual recalculations
D) Functional acknowledgements