Posted by: Pdfprep
Post Date: November 10, 2020
Rather than simply reviewing the adequacy of access control, appropriateness of access policies, and effectiveness of safeguards and procedures, the IS auditor is more concerned with effectiveness and utilization of assets.
True or false?
A . True
B . False
Answer: B
Explanation:
If a programmer has update access to a live system, IS auditors are more concerned with the programmer’s ability to initiate or modify transactions and the ability to access production than with the programmer’s ability to authorize transactions.
Leave a Reply