INSTITUTE OF COST AND MANAGEMENT

ACCOUNTANTS OF PAKISTAN
Vision Mission Statement
To be the Preference in Value Optimization for To develop strategic leaders through imparting quality
Business. education and training in Management Accounting, to
continually set and upgrade professional standards and
to conduct research, bringing value-addition to the
economy.

Assignment Questions (Fall - 2013 Session)

INFORMATION SYSTEMS AND I.T. AUDIT
Semester 3

INSTRUCTIONS:
1. A student who takes admission in Distance Learning Program shall be required to complete all assignments of
his/her respective subjects within the same academic session. If he/she fails to complete 60% assignments
within that session, he/she shall be required to re-enrol himself/herself in the next session after making
payment of 100% Distance Learning Program fee.

2. Each assignment is allocated a total of 100 marks.

3. Assignments of all subjects must be submitted in the session in which the examination is to be taken. The last
date for submission of 100% assignments is January 10, 2014 for Fall-2013 Examination.

4. You are required to pay Annual Subscription of Rs.1,500/- during July December each year to avoid payment of
Restoration Fee of Rs.2,000/-.

5. Examination Fee is payable from December 1 to 20, 2013 [with normal fee], December 21 to 31, 2013 [with
100% late fee] and January 1 to 15, 2014 [with 200% late fee] for Fall-2013 Examination. Examination forms can
be collected from any ICMAP Centre or website: www.icmap.com.pk.

6. Assignments would not be acceptable after due date.

Examination Eligibility:
The students, who are enrolled under the Distance Learning Program, must have submitted 60% assignments of
each subject in which they are enrolled to become eligible to appear in the examination.
 ASSIGNMENT NO. 1

Q.1 (a) Define a system and subsystem. Marks - 4

(b) What are the components of a system? Marks - 6
(c) What is Information System? What are its functions? Marks - 10
(d) Name each subsystems in an Accounting Information System explain each of them. Marks - 6

Q.2 (a) What is e-commerce? And its functions? Marks - 4

(b) Define E-Business? And its relationship with Information System? Marks - 8
(c) What is the relationship of E-Commerce with E-Business? Marks - 4
(d) How E-Commerce relates Buyer and Seller? Explain with example? Marks - 6

Q.3 (a) What is the scope of Information System in todays business? Relate importance of IS in Marks - 6
relation with performance of the organization.
(b) What do you mean by cross-functional enterprise system? Give some example. Marks - 6
(c) How many levels of Information System are there in an organization? Explain each of them. Marks - 6

Q.4 (a) What are the challenges that a business faces in use of Information System. Marks - 8
(b) Being a Management Accountant, what expertise you would require to design and implement Marks - 6
an Information System?
(c) What are the general reasons for failure in building and maintaining an Information System? Marks - 10
(d) What do you understand by functional business systems? Explain each with the help of Marks - 10
example.

ASSIGNMENT NO. 2

Q.1 What do you understand by Work System Framework? And what are its elements? Marks - 15

Q.2 Name functional areas of Information System Operations? And explain each of them. Marks - 10

Q.3 (a) What do you mean by IT Service Management (ITSM)? What are its aim and objectives? Marks - 15
(b) What tools are used to monitor the efficiency and effectiveness of ITSM? Marks - 10

Q.4 What steps are involved in migration process of information system from staging till Marks - 25
production environment?

Q.5 What is RFID? Name RFID applications and explain each of them. Marks - 25

ASSIGNMENT NO. 3

Q.1 (a) What is information? And what are its characteristics? Marks - 5
(b) What is Data? And What it relates with Information? Marks - 5
(c) What is Database? Explain all of its type with example. Marks - 5

Q.2 (a) What is Data Modeling (DM)? Marks - 5

(b) What are the basic tool of DM and how it works? Marks - 5
(c) What is Data Based Management System (DBMS)? And how it relates to Data Dictionary? Marks - 10

Q.3 (a) One of the types of information system is Business Intelligence Systems (BI)? Explain in detail. Marks - 15
And what common BI systems are available in Pakistan in relationship with the industry.
(b) What is Data Mining? Marks - 5
(c) Can we do Data Mining on NADRA database? If yes, how? Explain in detail. Marks - 10

Q.4 (a) What are expert systems? What are its major components? Marks - 10
(b) Why enterprise systems are commonly known as Back End Systems? Marks - 5

Q.5 (a) What are CRM, ERP and SCM? What is their business focus in Information System? Marks - 10
(b) What benefits and challenges are faced by implementing above Information System in an Marks - 10
organization as a whole?
 ASSIGNMENT NO. 4
Q.1 (a) How Information System is Planned? Explain each step of planning. Marks - 5
(b) What challenges are faced during IS planning? Marks - 5
(c) What is project role of Information System professional? Marks - 5
(d) How Information Technology is aligned with Business Strategy? Marks - 5

Q.2 (a) What is business driven IT Structure? Marks - 5

(b) What points should be kept in mind while selecting and investing in Information System? Marks - 5

Q.3 (a) What project management issues are involved in designing and implementing an Information Marks - 5
System?
(b) What is System Development Life Cycle (SDLC) Explain each phase of SDLC. Marks - 10

Q.4 (a) Explain phases of Information System development and implementation? Marks - 10
(b) Explain all activities performed in each stage of System Implementation. Marks - 10
(c) What is prototyping? Explain in reference with Accounting Information System Marks - 5
(d) How systems are developed using Prototype approach? Marks - 10

Q.5 (a) What is Decision Support Systems (DSS)? How they differ from conventional Information Marks - 10
System?
(b) What type of decision models you can create using DSS? Explain in context of some Marks - 10
manufacturing organization.

ASSIGNMENT NO. 5
Q.1 (a) What is IT Audit and what are its objectives? What tasks are involved in IT Audit? Marks - 10

Q.2 (a) What is Audit Planning? What steps are required for an IS Auditor to take at Planning Stage? Marks - 10
(b) What professional ethics are to be followed by IS Auditor as per IS Auditing and Guidelines? Marks - 10
(c) What steps are involved in IS Audit Process? Explain each briefly. Marks - 10

Q.3 (a) What objectives are achieved by the process of Risk Analysis of an Information System? Marks - 15
(b) What internal controls are required to reduce such risk in an organization? Marks - 15

Q.4 (a) What tools and techniques are used in Computer Assisted Audit Techniques (CAAT). Marks - 10
(b) What is Control Self Assessments (CSA)? And what are its objectives and benefits? Marks - 10
(c) What are critical success factor for CSA? Marks - 10

ASSIGNMENT NO. 6
Q.1 (a) Define IT Governance and its components? Marks - 20
(b) Explain in detail framework of IT Governance and its purpose. Marks - 20
(c) What is the role of IT Auditor in IT Governance? Marks - 10

Q.2 What is IT Balance Scorecard? How organization strategic goals are achieved through IT BSC? Marks - 20

Q.3 (a) What is the importance of Information Security Governance and what are its outcomes / Marks - 15
objectives?
(b) What policies are required in developing controls over Information System, related resources Marks - 15
and IS Department?

ASSIGNMENT NO. 7
Q.1 What areas are to be reviewed by IS Auditor while auditing Hardware of an organization? Marks - 20

Q.2 (a) You have been asked by your management to audit operating systems of your organization, Marks - 20
now what areas would you focus to perform this task?
(b) Name any three (3) operating systems that you know and functionality of each. Marks - 20

Q.3 (a) What areas are to be reviewed by IS Auditor while auditing databases of organization? Marks - 20
(b) What basic knowledge an auditor should posses to perform database audit? Marks - 20
 ASSIGNMENT NO. 8

Q.1 (a) What are the duties of IS Auditor in system/software acquisition? Marks - 20
(b) What steps are involved in system testing? Marks - 15

Q.2 (a) What is post implementation review of an information system? What objectives are achieved Marks - 10
by this activity?
(b) What are the steps involved in project management of auditing system development process Marks - 15
in general?

Q.3 (a) Explain five (5) types of automated evaluation techniques applicable to continuous online Marks - 20
auditing.
(b) What do you understand by Risk Assessment Model? Name all factors in an organization on Marks - 20
which it depends.

ASSIGNMENT NO. 9

Q.1 (a) What are the objectives of Information Security Management (ISM) and what are its Marks - 15
elements?
(b) What are the critical success factors in ISM? Marks - 10
(c) What steps are involved in auditing ISM framework? Marks - 10

Q.2 (a) What threats are generally faced by an organization that comes under the head of cyber Marks - 10
crime?
(b) Define few access controls at following levels: Marks - 20
Application / Operations
Database

Q.3 (a) What risk and threats are involved in IS security? Marks - 20
(b) What measure can IS Auditor take to reduce threats to secure LAN infrastructure? Marks - 15

ASSIGNMENT NO. 10

Q.1 (a) What is Business Continuity/Disaster Recovery? Marks - 10

(b) What steps are involved in development of Business Continuity / Disaster Recovery Planning? Marks - 15

Q.2 (a) What recovery strategies are used in Business Continuity / Disaster Recovery Planning (DRP) Marks - 10
and what are the bases of its selection?
(b) What are the components of Business Continuity Plan? Marks - 10

Q.3 (a) What is the process of backup and restoration of business data and what type of backup Marks - 15
devices and media is used in this process?
(b) What are the duties and functions of IS Auditor while auditing Business Continuity Plan? Marks - 15

Q.4 Search the web, download and present DRP of any manufacturing company and map it with Marks - 25
each steps you have explained in point Q-1, point b) above.