Question 1

______________________________ controls provide assurance that all modifications to programs are authorized and documented, and that the changes are completed, tested, and properly implemented.

Accepted Answer

The answer of ______________________________ controls provide assurance that all modifications...

Question 2

______________________________ is a process that employs mathematical algorithms and encryption keys to encode data (i.e., change un-encoded data, called plaintext, to a coded text form, called ciphertext) so that it is unintelligible.

Accepted Answer

The answer of ______________________________ is a process that employs mathematical...

Question 3

______________________________ are particularly important because they operate across all business processes and affect a company's capability to meet a multitude of control goals.

Accepted Answer

The answer of ______________________________ are particularly important because they operate...

Question 4

Segregation of duties consists of separating the four functions of authorizing events, ______________________________ events, ______________________________ events, and safeguarding the resources resulting from consummating the events.

Accepted Answer

The answer of Segregation of duties consists of separating the...

Question 5

Protecting resources against environmental hazards might include all of the following control plans except:

Accepted Answer

Rotation of duties is a control plan primarily used for reducing fraud and errors in processes, not for protecting resources against environmental hazards. Fire alarms, waterproof ceilings, and voltage regulators are all direct measures to protect against specific environmental risks such as fire, water damage, and electrical surges, respectively.

Question 6

The ______________________________ is charged with safeguarding the IT organization.

Accepted Answer

The answer of The ______________________________ is charged with safeguarding the...

Question 7

The ______________________________ function provides efficient and effective operation of the computer equipment by performing tasks such as mounting tapes, disks, and other media and monitoring equipment operation.

Accepted Answer

The answer of The ______________________________ function provides efficient and effective...

Question 8

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as ______________________________.

Accepted Answer

The answer of Combining the functions of authorizing and executing...

Question 9

The ______________________________ maintains custody of and controls access to programs, files, and documentation.

Accepted Answer

The answer of The ______________________________ maintains custody of and controls...

Question 10

______________________________ in an internal control system means assessment by management to determine whether the control plans in place are continuing to function appropriately over time.

Accepted Answer

The answer of ______________________________ in an internal control system means...

Question 11

Management should establish a(n) ______________________________ plan and implement related activities, including reviews, audits, and inspections, to ensure the attainment of IT customer requirements.

Accepted Answer

The answer of Management should establish a(n) ______________________________ plan and...

Question 12

The trust service principle of processing ______________________________ determines whether processing is complete, accurate, timely and authorized.

Accepted Answer

The answer of The trust service principle of processing ______________________________...

Question 13

Searching through rubbish for system information such as passwords is called:

Accepted Answer

Scavenging refers to the practice of sifting through waste material in order to find valuable information. In the context of computer security, this might involve searching through discarded documents or electronic devices in order to find sensitive information like passwords. Phishing, on the other hand, involves tricking people into revealing their passwords or other information through deceptive emails or websites. Smoozing refers to the practice of ingratiating oneself with someone in order to gain favor or information. Shoulder surfing involves looking over someone's shoulder to obtain sensitive information like passwords.

Question 14

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called ______________________________.

Accepted Answer

The answer of A small organization that does not have...

Question 15

One method for circumventing segregation of duties is ______________________________ between one or more persons (or departments) to exploit a system and conceal an abuse such as fraud.

Accepted Answer

The answer of One method for circumventing segregation of duties...

Question 16

The functions of the ______________________________ commonly include assigning passwords and making sure the IT organization is secure from physical threats.

Accepted Answer

The answer of The functions of the ______________________________ commonly include...

Question 17

______________________________ is a process that ensures that the enterprise's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

The answer of ______________________________ is a process that ensures that...

Question 18

The ______________________________ group is responsible for routing all work in to and out of the data center, correcting errors, and monitoring all error correction.

Accepted Answer

The answer of The ______________________________ group is responsible for routing...

Question 19

The function composed of people, procedures, and equipment and is typically called the information systems department, IS department, or IT department is the ______________________________.

Accepted Answer

The answer of The function composed of people, procedures, and...

Question 20

The ______________________________ coordinates the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

The answer of The ______________________________ coordinates the organizational and IT...

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls