In the process of evaluating program change controls, an IS auditor would use source code comparison software to:
A . examine source program changes without information from IS personnel.
B . detect a source program change made between acquiring a copy of the source and the comparison run.
C . confirm that the control copy is the current version of the production program.
D . ensure that all changes made in the current source copy are detected.
Answer: A
Explanation:
An IS auditor has an objective, independent and relatively complete assurance of program changes because the source code comparison will identify changes. Choice B is incorrect, because the changes made since the acquisition of the copy are not included in the copy of the software. Choice C is incorrect, as an IS auditor will have to gain this assurance separately. Choice D is incorrect, because any changes made between the time the control copy was acquired and the source code comparison is made will not be detected.
Leave a Reply