An IS auditor attempting to determine whether access to
program documentation is restricted to authorized persons
would MOST likely:

A. evaluate the record retention plans for off-premises storage.

B. interview programmers about the procedures currently
being followed.

C. compare utilization records to operations schedules.

D. review data file access records to test the librarian
function.

Answer Posted / guest

Answer: B

Asking programmers about the procedures currently being
followed is useful in determining whether access to program
documentation is restricted to authorized persons.
Evaluating the record retention plans for off-premises
storage tests recovery procedures, not access control over
program documentation. Testing utilization records or data
files will not address access security over program
documentation.

Is This Answer Correct ?    3 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

purchase orders issued to vendors have been authorized as per the authorization matrix

1201


WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2968