According to the waterfall cycle approach to systems development, which of the following sequence of events is correct?

• A.System requirements, software design, analysis, program design, testing, coding, operations.
• B.Program design, system requirements, software design, analysis, coding, testing, operations.
• C.System requirements, analysis, coding, software design, program design, testing, operations.
• D.System requirements, software design, analysis, program design, coding, testing, operations.

Comment: *

Name: *

Email: *

Verification: *

An organization uses the management-by-objectives method, whereby employee performance is based on defined goals Which of the following statements is true regarding this approach?

• A.It is more successful when goal-setting is performed not only by management, but by an team members, including lower-level staff.
• B.It is particularly helpful to management when the organization is facing rapid change
• C.It is particularly successful in environments that are prone to having poor employer-employee relations
• D.It is a more successful approach when adopted by mechanistic organizations

Comment: *

Name: *

Email: *

Verification: *

An internal audit activity is piloting a data analytics model, which aims to identify anomalies in payments to vendors and potential fraud indicators Which of the following would be the most appropriate criteria for assessing the success of the piloted model?

• A.The percentage of cases flagged by the model and confirmed as positives.
• B.The number of criminal investigations initiated based on the outcomes of the model
• C.The feedback of auditors involved with developing the model
• D.The development and maintenance costs associated with the model

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is correct regarding corporate compensation systems and related bonuses?
1) A bonus system should be considered part of the control environment of an organization and should be considered in formulating a report on internal control.
2) Compensation systems are not part of an organization's control system and should not be reported as such.
3) An audit of an organization's compensation system should be performed independently of an audit of the control system over other functions that impact corporate bonuses.

• A.1 only
• B.2 only
• C.3 only
• D.2 and 3 only

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes a detective control designed to protect an organization from cyberthreats and attacks?

• A.Comprehensive service level agreements with vendors.
• B.A list of trustworthy good traffic and a list of unauthorized blocked traffic.
• C.Firewall and other network penmeter protection tools.
• D.Monitoring for vulnerabilities based on industry intelligence

Comment: *

Name: *

Email: *

Verification: *