IT 内审 （IT审计+IT 内控问卷）中英文版.docVIP

PAGE 1 Information Technology Audit IT 审核 Internal Control Questionnaire For Information Technology (“IT”) IT内控问卷  Company: _______ ______ Date: ___ _ Completed by: _ Signature: _________________ [Name, title and department] Please complete this questionnaire (in English or Chinese) according to the following instructions: Answer all the yes/no questions by marking a “x” in the column of “Yes”, “No” or “N/A”; Write the comments or additional information according to the instruction (in italic) of each question in the column of “Comments”; and Attach reference documents in soft or hard copies and write their names in the column of “Names of documents attached”. Questions Yes No N/A Comments Name of documents attached A IT environment IT环境 1 Is access to system program libraries, application system documentation, test files, etc restricted to authorized personnel? 是否访问系统程序数据库、应用系统文档、测试文件，等，是否仅限于授权人访问？ State the authorized personnel for system program libraries, application system documentation, test files, etc. 请列出程序数据库、应用系统文件，测试文件，等等的授权个人 State the major systems used in your company. 请列出贵公司使用的主要系统 2 Are all programs and systems and their changes sufficiently documents for proper maintenance? 所有程序和系统及他们的改变是否有足够的文档用于正常维护？ 3 Are all changes to programs and system design properly approved? 所有针对程序和系统设计上的变化是否有严格的批核？ Describe the approval process for changes to programs and system design. 请描述有关程序和系统设计变化上的批核程序 4 Are changes to programs and system design reviewed on a timely basis by a responsible individual for improper changes? 所有程序和系统设计上的变化是否有相关负责人就不适当的变化进行及时地审查？ State who is responsible for reviewing changes to programs and system design. 请列明负责审查程序和系统设计的负责人 5 Are users consulted on all new system programming or revisions to existing programming regarding user needs, layout, test data, etc? 所有的新系统程序或者关于用户需要，设计，测试数据等等的针对现有程序的修正是否有与用户商议过？ State the major cha