Which control activity should not be part of this review?

Posted by: Pdfprep Category: IIA-CIA-Part3 Tags: , ,

An internal auditor is reviewing physical and environmental controls for an IT organization.

Which control activity should not be part of this review?
A . Develop and test the organization’s disaster recovery plan.
B . Install and test fire detection and suppression equipment.
C . Restrict access to tangible IT resources.
D . Ensure that at least one developer has access to both systems and operations.

Answer: D

Leave a Reply

Your email address will not be published.