The IS auditor should:
At the end of the testing phase of software development, an IS auditor observes that an
intermittent software error has not been corrected. No action has been taken to resolve the error.
The IS auditor should:
Which of the following is an implementation risk within the process of decision support systems?
Which of the following is an implementation risk within the process of decision support systems?
Which of the following conversion practices creates the GREATEST risk?
An organization is implementing a new system to replace a legacy system. Which of the following
conversion practices creates the GREATEST risk?
Which of the following system and data conversion strategies provides the GREATEST redundancy?
Which of the following system and data conversion strategies provides the GREATEST
redundancy?
Which of the following would impair the independence of a quality assurance team?
Which of the following would impair the independence of a quality assurance team?
From a risk management point of view, the BEST approach when implementing a large and complex IT infrastructur
From a risk management point of view, the BEST approach when implementing a large and
complex IT infrastructure is:
While reviewing the data migration activity, the MOST important concern for the IS auditor is to determine tha
An organization is migrating from a legacy system to an enterprise resource planning (ERP)
system. While reviewing the data migration activity, the MOST important concern for the IS auditor
is to determine that there is a:
The reason a certification and accreditation process is performed on critical systems is to ensure that:
The reason a certification and accreditation process is performed on critical systems is to ensure
that:
During a postimplementation review of an enterprise resource management system, an IS auditor would MOST likel
During a postimplementation review of an enterprise resource management system, an IS auditor
would MOST likely:
Which of the following is a corrective control that the IS auditor should recommend?
During an application audit, an IS auditor finds several problems related to corrupted data in the
database. Which of the following is a corrective control that the IS auditor should recommend?