1) You are an auditor working for $15 million sales per year specialty chocolate candy manufacturer. The company is planning to appoint in e-commerce over the Internet. What would be your biggest concerns regarding risk and why?
2) Mr. Joey Ramone is the CFO of a corporation which manufactures parts for the four largest auto producers in the U.S. Mr. Ramone believes that likelihood of a disaster impacting his business is very remote. Provide competitive pressures and slim margins in his business, he does not need to spend money or devote the resources to prepare and maintain a BCP/DRP. Explain how would you make the case that a BCP/DRP is needed?
4) What are the differences and similarities in way you would go about performing an IT audit of Vista/Windows 7 and UNIX/Linux?
5) Briefly explain what you would consider to be the top five vulnerabilities of Vista/Windows 7.
6) Describe what are three similarities and three differences between the Trust Services Principles and COBIT 4.1?