For control purposes, which of the following should be organizationally segregated from the computer operations function?
Answer(s): C
Systems development is performed by systems analysts and application programmers.
In the organization of the IT function, the most important separation of duties is:
Answer(s): B
Separation of duties is a general control that is vital in a computerized environment Some separation of duties common in non-computerized environments may not be feasible in a computer environment. However, certain tasks should not be combined. Systems analysts and programmers should be separate from computer operators. Both programmers and analysts may be able to modify programs, files, and controls and should therefore have no access to those programs nor to computer equipment Operators should not be assigned programming duties or responsibility for systems design and should have no opportunity to make changes in programs and systems.
Which of the following represents an internal control weakness in a computer-based system?
Answer(s): D
Computer operators need access to operator instructions. Otherwise, they could not perform their duties. Operators, however, should not have the authority to change computer programs.
The duties properly assigned to an information security officer could include all of the following except:
The information security officer should not know user passwords. They are normally stored on a computer in encrypted format, and users change them directly.
In a large organization, the biggest risk in not having an adequately staffed information center help desk is:
The biggest risk in not having an adequately staffed help desk is that users will unknowingly persist in making errors in their interaction with the information systems.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.