Before sending or receiving EDI messages, a company should:
Answer(s): A
Before sending or receiving EDI messages, a company should execute a trading partner agreement with its customers and suppliers. All parries should understand their responsibilities, the messages each will initiate, how they will interpret messages, the means of authenticating and verifying the completeness and accuracy of messages, the moment when the contract between the parries is effective, the [required level of security, etc.
The practice of maintaining a test program library separate from the production program library is an example of:
This separation is an organizational control. Organizational controls concern the proper segregation of duties and responsibilities within the information systems department.Although proper segregation is desirable, functions that would be considered incompatible if performed by a single individual in a manual activity are often performed through the use of an information systems program or series of programs. Thus, compensating controls may be necessary, such as library controls, effective supervision, and rotation of personnel. Segregating test programs makes concealment of unauthorized changes in production programs more difficult.
An organization's computer help-desk function is usually a responsibility of the:
Answer(s): C
Help desks are usually a responsibility of computer operations because of the operational nature of their functions. A help desk logs reported problems, resolves minor problems, and forwards more difficult problems to the appropriate information systems resources, such as a technical support unit or vendor assistance.
Which of the following terms best describes the type of control practice evidenced by a segregation of duties between computer programmers and computer operators?
Answer(s): D
Organizational control concerns the proper segregation of duties and responsibilities within the information systems function. For example, programmers should not have access to the equipment, and operators should not have programming ability. Although proper segregation is desirable, functions that would be considered incompatible if performed by a single individual in a manual activity are often performed through the use of an information systems program or series of programs. Therefore, compensating controls may be necessary, such as library controls and effective supervision.
When a new application is being created for widespread use in a large organization, the principal liaison between the IT function and the rest of an organization is normally a(n):
Systems analysts are specifically qualified to analyze and design computer information systems. They survey the existing system, analyze the organization's information requirements, and design new systems to meet those needs. Systems analysts communicate with the entire organization and act as a liaison between the organization and the IT function.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.