Which of the following controls most likely could prevent computer personnel from modifying programs to bypass programmed controls?
Answer(s): B
Programmers and analysts can modify programs, data files, and controls. Thus, they II should have no access to programs used to process transactions. Segregation of programming and operations is a control necessary to prevent unauthorized modifications of programs.
Both users and management approve the initial proposal, design specifications, conversion plan, and testing plan of an information system. This is an example of:
Answer(s): A
Implementation controls occur in the systems development process at various points to ensure that implementation is properly controlled and managed.
An electronics company has decided to implement a new system through the use of rapid application development techniques.Which of the following would be included in the development of the new system?
Answer(s): C
The new system would be developed module by module until completed.
A bank is developing a computer system to help evaluate loan applications. The information systems IS staff interview the bank's mortgage underwriters to extract their knowledge and decision processes for input into the computer system. The completed system should be able to process information the same as do the underwriters and make final recommendations regarding loan decisions. This approach is called:
An expert system is a knowledge-intensive computer program that captures the expertise of a human in limited domains of knowledge.
After using the report writer for several months, the marketing analysts gained confidence in using it but the marketing department manager became concerned.Whenever analysts revised reports they had written earlier, the coding errors kept reappearing in their command sequences. The manager was sure that all the analysts knew what the errors were and how to avoid them. The most likely cause of the reappearance of the same coding errors is inadequate:
Change control manages changes in information system resources and procedures. It includes a formal change request procedure; assessments of change requests on technical and business grounds; scheduling changes; testing, installing, and monitoring changes; and reporting the status of recorded changes. The analysts were reusing erroneous code that should have been but was not corrected.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.