Which of the following controls would an IS auditor look for in an environment where duties cannot
be appropriately segregated?

An IS auditor reviewing an organization that uses cross-training practices should assess the risk
of:

When segregation of duties concerns exist between IT support staff and end users, what would be
a suitable compensating control?

An IS auditor should be concerned when a telecommunication analyst:

A long-term IS employee with a strong technical background and broad managerial experience has
applied for a vacant position in the IS audit department. Determining whether to hire this individual
for this position should be based on the individual’sexperience and:

A local area network (LAN) administrator normally would be restricted from:

Many organizations require an employee to take a mandatory vacation (holiday) of a week or more
to:

When an employee is terminated from service, the MOST important action is to:

Which of the following would BEST provide assurance of the integrity of new staff?

From a control perspective, the key element in job descriptions is that they: