A.notify the audit committee.

B.identify compensating controls.

C.document the exception in an audit report.

D.review security incident reports.

A.Full backup

B.Differential backup

C.Real-time backup

D.Virtual backup

A.File level encryption

B.Application level firewalls

C.File Transfer Protocol (FTP)

D.Instant messaging policy

A.Interviewing senior IT management

B.Reviewing user activity logs

C.Mapping IT processes to roles

D.Reviewing vacation patterns

A.The company is being sued for false accusations.

B.Employees have been misappropriating funds.

C.Key employees have not taken vacation for 2 years.

D.The financial report may contain undetected material errors.