Which of the following computer controls would provide the best evidence that unauthorized users are not accessing specific computer programs and files?
A)Using passwords requiring access to those programs and files.
B)Periodically reviewing and confirming access rights for the organization's users.
C)Monitoring actual user activity through a program log and comparing that activity to authorized levels.
D)Ensuring that access to programs and files is removed for recently-terminated employees.

Question

Quizplus · Accepted Answer

Monitoring actual user activity through a program log and comparing that activity to authorized levels provides the most direct and conclusive evidence that unauthorized users are not accessing specific computer programs and files. This control allows for the detection and investigation of any anomalous activity, and can also serve as a deterrent to potential unauthorized access. Passwords, access reviews, and access removal for terminated employees are all important controls, but do not provide as strong evidence that unauthorized users are not accessing specific programs and files.

Which of the Following Computer Controls Would Provide the Best