Which of the following is an example of a preventative control in an accounts payable system?

• A.The system only allows payments to vendors who are included in the system's master vendor list.
• B.The system produces daily payment summary reports that staff use to compare against invoice totals.
• C.Backups of the system and its data are performed on a nightly basis and tested periodically.
• D.Policies and procedures are clearly communicated to all members of the accounts payable department.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide an IS auditor with the GREATEST assurance that data disposal controls support business strategic objectives?

• A.Media labeling policy
• B.Media shredding policy
• C.Media sanitization policy
• D.Media recycling policy

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an oft-cited cause of vulnerability of networks?

• A.software monoculture
• B.software diversification
• C.single line of defense
• D.multiple DMZ
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a characteristic of timebox management?

• A.Not suitable for prototyping or rapid application development (RAD)
• B.Eliminates the need for a quality process
• C.Prevents cost overruns and delivery delays
• D.Separates system and user acceptance testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following are BIST suited for continuous auditing?

• A.Total number of false positives
• B.Total number of hours budgeted to security
• C.Effectiveness of the security program
• D.Security incidents vs. industry benchmarks

Comment: *

Name: *

Email: *

Verification: *