Which of the following access setups is appropriate in a computer environment?
Answer(s): A
The appropriate setup for access in the computer environment is for users to have update access for production data. Users need to update data through applications programs, but have no need to change production programs.
Most large-scale computer systems maintain at least three program libraries: production library for running programs); source code library maintains original source coding); and test library for programs which are being changed).Which of the following statements is correct regarding the implementation of sound controls over computer program libraries?
Answer(s): C
The program librarian is accountable for, and has custody of, the programs in the production library.
Preventing someone with sufficient technical skill from circumventing security procedures and making changes to production programs is best accomplished by:
Answer(s): D
When duties are separated, users cannot obtain a detailed knowledge of programs and computer operators cannot gain unsupervised access to production programs.
The marketing department's proposal was finally accepted, and the marketing employees attended a class in using the report writer. Soon, the marketing analysts found that it was easier to download the data and manipulate it on their own desktop computers in spreadsheets than to perform all the data manipulation on the server. One analyst became highly skilled at downloading and wrote downloading command sequences for the other employees.When the analyst left the company for a better job, the department had problems making modifications to these command sequences. The department's problems are most likely due to inadequate:
One risk of end-user computing is that documentation may be poor and that important knowledge may be limited to one person. The command sequences should have been documented so that other analysts could use and modify them readily.
Traditional information systems development procedures that ensure proper consideration of controls may not be followed by users developing end-user computing EUC) applications.Which of the following is a prevalent risk in the development of EUC applications?
End-user developed applications may not be subject to an independent outside review by systems analysts and are not created in the context of a formal development methodology. These applications may lack appropriate standards, controls, quality assurance procedures, and documentation. A risk of end-user applications is that management may rely on them as much as traditional applications.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.