Exam IIA-CIA-Part3 topic 1 question 163 discussion

Actual exam question from IIA's IIA-CIA-Part3

Question #: 163
Topic #: 1

A holding company set up a centralized group technology department, using a local area network with a mainframe computer to process accounting information for all companies within the group. An internal auditor would expect to find all of the following controls within the technology department except:

A. Adequate segregation of duties between data processing controls and file security controls.
B. Documented procedures for remote job entry and for local data file retention.
C. Emergency and disaster recovery procedures and maintenance agreements in place to ensure continuity of operations.
D. Established procedures to prevent and detect unauthorized changes to data files.

Show Suggested Answer

Suggested Answer: B 🗳️

by Tico at Sept. 23, 2021, 5:19 a.m.

Comments

Submit Cancel

Tico

4 months, 1 week ago

What is the rationale of B? is that because those documents are in remote locations rather than in the technology department?

upvoted 1 times

Ren_92

4 months ago

Key takeaway is that they're using LAN as mainframe which limits access to outside network with exception for BCM. Hence, the organization isn't configured for remote works at least that's for accounting works.

upvoted 4 times

...

Exam IIA-CIA-Part3 All Questions

View all questions & answers for the IIA-CIA-Part3 exam

Exam IIA-CIA-Part3 topic 1 question 163 discussion

Comments

Tico

Ren_92

SY0-701