Which of the following functions should be performed by the application owners to ensure an adequate
segregation of duties between IS and end users?

A.
System analysis

B.
Authorization of access to data

C.
Application programming

D.
Data administration

Explanation:
The application owner is responsible for authorizing access to data. Application development and programming
are functions of the IS department. Similarly, system analysis should be performed by qualified persons in IS
who have knowledge of IS and user requirements. Data administration is a specialized function related to
database management systems and should be performed by qualified database administrators.