Section: The process of Auditing Information System

Section: Protection of Information Assets
Explanation:
Regression testing should use data from previous tests to obtain accurate conclusions regarding the
effects of changes or corrections to a program, and ensuring that those changes and corrections have not
introduced new errors.

Explanation/Reference:
Explanation:
An intrusion detection system should to able to run continually without human supervision. The system must be reliable enough to allow it to run in the background of the system being observed. However, it should not be a ""black box"", coz you want to ensure its internal workings are examinable from outside.

It is most desirable to conduct an investment portfolio analysis, which will present not only a clear focus on investment strategy, but will provide the rationale for terminating nonperforming IT projects. Internal control self-assessment {CSA} may highlight noncompliance to the current policy, but may not necessarily be the best source for driving the prioritization of IT projects. Like internal CSA, IS audits may provide only part of the picture for the prioritization of IT projects. Businessrisk analysis is part of the investment portfolio analysis but, by itself, is not the best method for prioritizing new IT projects.