How is the risk of improper file access affected upon implementing a database system?

The directory system of a database-management system describes:

What can be implemented to provide the highest level of protection from external attack?

Proper segregation of duties does not prohibit a quality control administrator from also being responsible for
change control and problem management. True or false?

Who should be responsible for network security operations?

Allowing application programmers to directly patch or change code in production programs increases
risk of fraud. True or false?

When should reviewing an audit client’s business plan be performed relative to reviewing an organization’s IT
strategic plan?

What process allows IS management to determine whether the activities of the organization differ from the
planned or expected levels? Choose the BEST answer.

When performing an IS strategy audit, an IS auditor should review both short-term (one-year) and long-term
(three-to five-year) IS strategies, interview appropriate corporate management personnel, and ensure that the
external environment has been considered. The auditor should especially focus on procedures in an audit of IS
strategy. True or false?

When auditing third-party service providers, an IS auditor should be concerned with which of the following?
Choose the BEST answer.