CISA

Information system auditors have identified separation of duties in enterprise resource planning (ERP) systems. Which of the following is the best way to prevent repetitive configuration from occurring? A. Use a role-based model to grant user access B. Regularly monitor access rights C. Correcting separation of duties D. Reference standard user access matrix A. Use a role-based model to grant user access Which of the following should be the most important factor driving a single appli...

Chapter 1 ... Source code uncompiled, archive code Object code compiled code that is distributed and put into production; not able to be read by humans Inherent risk the risk that an error could occur assuming no compensating control exist Control risk the risk that an error exists that would not be prevented by internal controls Detection risk the risk that an error exists, but is not detected. The risk that an IS auditor may use an inadequate test procedure and c...

Gap Analysis Gap Analysis would be the best method to identify issues that need to be addressed in the reengineering process. Gap analysis indicates which parts of current processes conform to best practices (desired state) and which do not. Application Gateway An application gateway firewall is effective in preventing applications such as File Transfer Protocols (FTPs) from entering the organization's network. Inform appropriate personnel immediately The first thing an IS auditor ...