Traditional information systems development and operational procedures typically involve four functional areas. The systems analysis function focuses on identifying and designing systems to satisfy organizational requirements. The programming function is responsible for the design, coding, testing, and debugging of computer programs necessary to implement the systems designed by the analysis function. The computer operations function is responsible for data preparation, program/job execution, and system maintenance. The user function provides the input and receives the output of the system.Which of these four functions is often poorly implemented or improperly omitted in the development of a new end-user computing EUC application?
Answer(s): A
Systems analysis is one step that is not absolutely required in the development of a system. The desire to produce a system quickly may result in this step being eliminated or poorly implemented. A system is often produced and then analyzed to see if it will satisfy the needs of the organization. In an EUC application, the systems analysis is often incomplete or omitted.
Responsibility for the control of end-user computing EUC) exists at the organizational, departmental, and individual user level.Which of the following should be a direct responsibility of the individual users?
Answer(s): D
EUC involves user-created or user-acquired systems that are maintained and operated outside of traditional information systems controls. In this environment, an individual user is ordinarily responsible for the physical security of the equipment s)he uses.
Which of the following risks is more likely to be encountered in an end-user computing EUC) environment as compared with a centralized environment?
Answer(s): C
The risk of allowing end users to develop their own applications is decentralization of control. End- user developed applications may not be subject to an independent outside review by systems analysts and are not created in the context of a formal development methodology. These applications may lack appropriate standards, controls, and quality assurance procedures. Moreover, when end users create their own applications and files, private information systems may proliferate in which data are largely uncontrolled. These systems may contain the same information, but end-user applications may update and define the data in different ways. Thus, determining the location of data and ensuring data consistency become more difficult because the applications are difficult to integrate.
The accountant who prepared a spreadsheet model for workload forecasting left the company, and the accountant's successor was unable to understand how to use the spreadsheet. The best control for preventing such situations from occurring is to ensure that:
The accountant's successor could not use the forecasting model because of inadequate documentation. By requiring that documentation standards exist and are followed, the company will enable new employees to understand internally developed programs when the developer leaves the organization.
An electronic meeting conducted between several parties at remote sites is referred to as:
Conducting an electronic meeting among several parties at remote sites is teleconferencing. It can be accomplished by telephone or electronic mail group communication software. Videoconferencing permits the conferees to see each other on video screens. The practice has grown in recent years as companies have attempted to cut their travel costs.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.