The use of control totals satisfies the control objective of processing integrity. Processing integrity refers to the accuracy, completeness, timeliness, and validity of data processing. Control totals are a method of verifying the correctness of data processing by comparing the total value or count of a batch of transactions before and after processing. For example, if a batch of 100 invoices is entered into an accounting system, the total amount and number of invoices should match before and after processing. If there is a discrepancy, it indicates an error in data entry, transmission, or processing. Control totals help to ensure that no transactions are lost, duplicated, or altered during processing.
References:
* Control Objectives & Activities: Examples, Appropriateness
* Levels and Types of Control | Principles ofManagement
* CISA Review Manual 27th Edition, page 337

According to the ISACA CISA Study Manual (2020), it is important that business owners are involved in the project initiation phase in order to ensure that the project is aligned with the organization's objectives and that the necessary requirements have been identified (p. 183). Therefore, the IS auditor's greatest concern should be that incomplete requirements may have been identified due to the lack of business owner involvement in the project initiation phase.

The greatest risk if two users have concurrent access to the same database record is Data Integrity. This is because concurrent access to the same record can lead to conflicts and inconsistencies in the data, resulting in data being lost or corrupted. Data integrity is the assurance that the data stored in the database is accurate, consistent, and reliable.

The lack of adequate security controls represents a vulnerability, exposing sensitive information and data to the risk of malicious damage, attack or unauthorized access by hackers. This could result in a loss of sensitive information and lead to theloss of goodwill for the organization. A succinct definition of risk is provided by the Guidelines for the Management of IT Security published by the International Organization for Standardization (ISO), which defines risk as the 'potential that a given threat will exploit the vulnerability of an asset or group of assets to cause loss or damage to the assets.' The various elements of the definition are vulnerability, threat, asset
and impact. Lack of adequate security functionalityin this context is a vulnerability.