Question 796

Establishing data ownership is an important first step for which of the following processes?
  • Question 797

    Which of the following access rights in the production environment should be granted to a developer to maintain segregation of duties?
  • Question 798

    As an auditor it is very important to ensure confidentiality, integrity, authenticity and availability are
    implemented appropriately in an information system. Which of the following definitions incorrectly describes
    these parameters?
    1. Authenticity - A third party must be able to verify that the content of a message has been sent by a
    specific entity and nobody else.
    2. Non-repudiation - The origin or the receipt of a specific message must be verifiable by a third party. A
    person cannot deny having sent a message if the message is signed by the originator.
    3. Accountability - The action of an entity must be uniquely traceable to different entities
    4. Availability - The IT resource must be available on a timely basis to meet mission requirements or to
    avoid substantial losses.
  • Question 799

    An IS auditor is evaluating the risk associated with moving from one database management system (DBMS) to another. Which of the following would be MOST helpful to ensure the integrity of the system throughout the change?
  • Question 800

    An organization outsources its payroll function to a third-party service provider. Which of the following is MOST important for an IS auditor to verify when reviewing the outsourcing agreement?