IT 内审 IT审计IT 内控问卷中英文版.docVIP

PAGE 1Information Technology AuditIT 审核Internal Control Questionnaire For Information Technology (“IT”)IT内控问卷Company: _______ ______ Date: ___ _Completed by: _ Signature: _________________ [Name, title and department]Please complete this questionnaire (in English or Chinese) according to the following instructions:Answer all the yes/no questions by marking a “x” in the column of “Yes”, “No” or “N/A”;Write the comments or additional information according to the instruction (in italic) of each question in the column of “Comments”; andAttach reference documents in soft or hard copies and write their names in the column of “Names of documents attached”.QuestionsYesNoN/ACommentsName of documents attachedAIT environment IT环境1Is access to system program libraries, application system documentation, test files, etc restricted to authorized personnel? 是否访问系统程序数据库、应用系统文档、测试文件，等，是否仅限于授权人访问？State the authorized personnel for system program libraries, application system documentation, test files, etc. 请列出程序数据库、应用系统文件，测试文件，等等的授权个人State the major systems used in your company. 请列出贵公司使用的主要系统2Are all programs and systems and their changes sufficiently documents for proper maintenance? 所有程序和系统及他们的改变是否有足够的文档用于正常维护？3Are all changes to programs and system design properly approved? 所有针对程序和系统设计上的变化是否有严格的批核？Describe the approval process for changes to programs and system design. 请描述有关程序和系统设计变化上的批核程序4Are changes to programs and system design reviewed on a timely basis by a responsible individual for improper changes? 所有程序和系统设计上的变化是否有相关负责人就不适当的变化进行及时地审查？State who is responsible for reviewing changes to programs and system design. 请列明负责审查程序和系统设计的负责人5Are users consulted on all new system programming or revisions to existing programming regarding user needs, layout, test data, etc? 所有的新系统程序或者关于用户需要，设计，测试数据等等的针对现有程序的修正是否有与用户商议过？State the major channels of consultation and their effec