Which of the following statements about general controls is not correct?
A) Programmers should have access to computer operations to aid users in resolving problems.
B) Disaster recovery plans should identify alternative hardware to process company data.
C) Successful IT development efforts require the involvement of IT and non- IT personnel.
D) The chief information officer should report to senior management and the board.

Question

Quizplus · Accepted Answer

General controls in IT environments aim to ensure the proper operation and security of information systems. Programmers having access to computer operations can pose a security risk, as it may allow for unauthorized changes or access to sensitive information. The other options (B, C, D) are generally accepted practices for ensuring IT security and effectiveness.

Which of the Following Statements About General Controls Is Not