Which of the following questions is LESS likely to help in assessing controls over hardware and software
maintenance?

A.
Is access to all program libraries restricted and controlled?

B.
Are integrity verification programs used by applications to look for evidences of data tampering, errors, and
omissions?

C.
Is there version control?

D.
Are system components tested, documented, and approved prior to promotion to production?

Explanation:
Hardware and software maintenance access controls are used to monitor the installation of, and updates to,
hardware and software to ensure that the system functions as expected and that a historical record of changes
is maintained. Integrity verification programs are more integrity controls than software maintenance controls.
Incorrect Answers:
A: Restricting and controlling access to all program libraries is part of controlling hardware and software
maintenance. Asking about this will help in assessing controls over hardware and software maintenance.
C: Version control is part of controlling hardware and software maintenance. Asking about this will help in
assessing controls over hardware and software maintenance.
D: Testing, documenting and approval of system components is part of controlling hardware and software
maintenance. Asking about this will help in assessing controls over hardware and software maintenance.