Which of the following questions is less likely to help in assessing controls over hardware and
software maintenance?

A.
Is access to all program libraries restricted and controlled?

B.
Are integrity verification programs used by applications to look for evidences of data tampering,
errors, and omissions?

C.
Is there version control?

D.
Are system components tested, documented, and approved prior to promotion to production?