Which of the following is a cybersecurity monitoring activity intended to deter disruptive codes from being installed on an organization's systems?

Which of the following statements is correct regarding corporate compensation systems and related bonuses?
1) A bonus system should be considered part of the control environment of an organization and should be considered in formulating a report on internal control.
2) Compensation systems are not part of an organization's control system and should not be reported as such.
3) An audit of an organization's compensation system should be performed independently of an audit of the control system over other functions that impact corporate bonuses.

Which of the following best describes the concept of relevant cost?

Organizational activities that complement each other and create a competitive advantage are called a:

Which of the following does not provide operational assurance that a computer system is operating properly?