Section: Protection of Information Assets
Explanation/Reference:
Explanation:
Electronic data interface (EDI) supports intervendor communication while decreasing the time necessary for review because it is usually configured to readily identify errors requiring follow-up.

Section: Protection of Information Assets

Explanation/Reference:
Explanation:
An IS auditor must review the change management process, including patch management procedures, and verify that the process has adequate controls and make suggestions accordingly. The other choices are part of a good change management process but are not an IS auditor's responsibility.

Section: Protection of Information Assets
Explanation:
Keeping the data in one place is the best way to ensure that data are stored without redundancy and that all users have the same data on their systems. Although increasing the frequency may help to minimize the problem, the risk of duplication cannot be eliminated completely because parallel data entry is still possible.
Business requirements will most likely dictate where data processing activities are performed. Changing the business structure to solve an IT problem is not practical or politically feasible. Detective controls do not solve the problem of duplicate processing, and would require that an additional process be implemented to handle the discovered duplicates.

To identify required actions to close the gap between current and desired maturity levels: This option involves using the maturity model to assess the organization's current level of maturity and then identifying the actions required to move towards the desired maturity level. This approach can be useful if the organization has a specific goal or objective in mind and wants to focus its efforts on the areas that need the most improvement. This approach can also be more feasible for small organizations, as it does not necessarily require a significant investment of time or resources.