About WordPress
Log In

Search

Toggle Side Panel

Sign in

Search for:

Search for:

WC070 – How can SOD help us in risk assessments/ IA planning?

0% Complete

0/0 Steps

Webclass 70: Replay and PDF
Webclass 70: Take the quiz and get your CPE certificate

1 Quiz
- Webclass 70: How can SOD help us in Risk Assessments/ IA planning?

Quizzes

Webclass 70: Secret number

Participants 13

Bee
Be
admin
Claire
Hanh Huynh

Show more

Quiz 1 of 2

← Previous Next→

Webclass 70: How can SOD help us in Risk Assessments/ IA planning?

admin June 9, 2026

WC070 – How can SOD help us in risk assessments/ IA planning?
Webclass 70: Take the quiz and get your CPE certificate
Webclass 70: How can SOD help us in Risk Assessments/ IA planning?

Time limit: 0

Quiz Summary

0 of 9 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 9 Questions answered correctly

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Review
Answered
Correct
Incorrect

Question 1 of 9

1. Question

Q1. Why might an external audit firm write that the report does not cover all risks that could be the result of collusion between employees and/or third-parties?

Because if two employees collude then the principle of separation of duties is broken
Correct Incorrect Correct answer

Because employees can be friends with third-parties
Correct Incorrect Correct answer

Correct

Incorrect
Question 2 of 9

2. Question

Q2. What type of automated information can we get from SOD dashboards?

We can find out who has access to what and who actually did what
Correct Incorrect Correct answer

We can estimate the value of the risk to the organization
Correct Incorrect Correct answer

Correct

Incorrect
Question 3 of 9

3. Question

Q3. During the webclass what three columns do we add for each SOD risk that could help auditors with their planning work?

– Interview questions – Documentation – Data questions
Correct Incorrect Correct answer

– When to conduct the audit – Which people need to be interviewed – Which transactions need to be obtained
Correct Incorrect Correct answer

Correct

Incorrect
Question 4 of 9

4. Question

Q4. If a user has access to enter a supplier invoice and a supplier payment, which interview questions could we ask?

– Which types of invoices can be entered without purchase orders? – What are the three-way-match controls? – Are there mitigating controls for those with more access than expected? – Is there a derrogation from management for users that have more access?
Correct Incorrect Correct answer

– What was the total value of invoices without purchase orders? – How many people have access to enter invoices and payments?
Correct Incorrect Correct answer

Correct

Incorrect
Question 5 of 9

5. Question

Q5. If a user has access to enter a supplier invoice and a supplier payment, which data questions could we ask?

– What is the total value/ frequency of invoices that are entered by users that also enter the payments per user/ date/ supplier? – Of these invoices, what value/ proportion do not have purchase orders? – Of these, are htere cases of suppliers working with only one member of purchasing?
Correct Incorrect Correct answer

– Are there people who have access to enter invoices and payments? – What are the policies for entering invoices and payments?
Correct Incorrect Correct answer

Correct

Incorrect
Question 6 of 9

6. Question

Q6. What is the difference between the dashboard “Who has access to what?” and the dashboards “Who did what?”

– For "Who has access to what", we do not know whether or not the user actually used the transactions that are in conflict
Correct Incorrect Correct answer

– For "Who has access to what" we see which transaction codes were actually used
Correct Incorrect Correct answer

Correct

Incorrect
Question 7 of 9

7. Question

Q7. Why might we want to combine the dashboards “Who has access to what”, with “Who did what”, as well as with the recommended audit questions for the audit plan?

– So that we can see on one page the users that actually used the transactions that are in conflict and then decide which audit areas it would be good to audit
Correct Incorrect Correct answer

– So that we can plan out our audit based on who has access to which transaction codes
Correct Incorrect Correct answer

Correct

Incorrect
Question 8 of 9

8. Question

Q8. When we combine the data from different sources in QLIK, how do we ensure that QLIK creates a star model out of the data?

By adding key fields to the data tables, during the data load
Correct Incorrect Correct answer

By drawing the data model on the screen
Correct Incorrect Correct answer

Correct

Incorrect
Question 9 of 9

9. Question

Q9. Why would we rather use a QLIK data model to view the data, rather than using the Excel downloads on separate Excel sheets with VLOOKUP?

Because with VLOOKUP, the Excel cell will show only the first value that it finds, whereas with a QLIK dashboard we can see all the corresponding values (especially if there is a many-many relationship)
Correct Incorrect Correct answer

Because with Excel, you need to look at each individual sheet to get the information
Correct Incorrect Correct answer

Correct

Incorrect