Which implemented control would best assist in meeting the control objective that a system have the capability to hold users accountable for functions performed?
Answer(s): C
Activity logging provides an audit trail of user activity.
Which new issues, associated with rapidly advancing computer technology, create new risk exposures for organizations?
Advancing computer technology presents more complex audit environments. With the advent of systems that permit remote access, the risk that unauthorized parties may obtain or tamper with important information is increased.
Which of the following is an important senior management responsibility with regard to information systems security?
Answer(s): A
Senior management is responsible for risk assessment, including identification of risks and consideration of their significance, the likelihood of their occurrence, and how they should be managed. Senior management is also responsible for establishing organizational policies regarding computer security and implementing a compliance structure. Thus, senior management should assess the risks to the integrity, confidentiality, and availability of information systems data and resources.
Management's enthusiasm for computer security seems to vary with changes in the environment, particularly the occurrence of other computer disasters.Which of the following concepts should be addressed when making a comprehensive recommendation regarding the costs and benefits of computer security?I). Potential loss if security is not implementedII). Probability of occurrencesIII). Cost and effectiveness of the implementation and operation of computer security
Answer(s): D
Potential loss is the amount of dollar damages associated with a security problem or loss of assets. Potential loss times the probability of occurrence is an estimate expected value) of the exposure associated with lack of security. It represents a potential benefit associated with the implementation of security measures. To perform a cost-benefit analysis, the costs should be considered. Thus, all three items need to be addressed.
Of the following, the greatest advantage of a database server) architecture is:
Data organized in files and used by the organization's various applications programs are collectively known as a database. In a database system, storage structures are created that render the applications programs independent of the physical or logical arrangement of the data. Each data item has a standard definition, name, and format, and related items are linked by a system of pointers. The programs therefore need only to specify data items by name, not by location. A database management system handles retrieval and storage. Because separate files for different applications programs are unnecessary, data redundancy can be substantially reduced.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.