Gujarat Technological University 2011 M.B.A Information Systems Audit and Control (ISAandC) - Question Paper

Seat No.    Enrolment No.

GUJARAT TECHNOLOGICAL UNIVERSITY

M.B.A. Sem - IV Examination May 2011 Subject code: 840402 Subject Name: Information System Audit and Control Date:23/05/2011    Time: 02.30 pm - 05.30 pm

Total Marks: 70

Instructions:

1.    Attempt all questions.

2.    Make suitable assumptions wherever necessary.

3.    Figures to the right indicate full marks.

Q.1 (a) Explain objectives of information systems auditing.    07

(b) Write short note on PIN numbers.    07

Q.2 (a) Why there is risk associated with Information system? Explain types of 07 risks.

(b) Discuss: In era of information technology, business is almost impossible 07 without information system and explain need of Audit and control of information system.

OR

(b) Explain possible security threats and remedial measures associated with 07 Information system.

Q.3 (a) What are normative models of the system development process? Explain 07 system development life cycle approach.

(b) Write brief note on controls over subversive threats.    07

OR

Q.3 (a) Describe planning, organizing, staffing, leading and controlling functions of 07 IS department.

(b) Explain importance of Interviews, questionnaires and flowcharts. Explain 07 questionnaires in detail.

Q.4 (a) How to evaluate system efficiency? Explain types of workload models.    07