According to HA guidance or IT which of the following spreadsheets is most likely to be considered a high-risk user-develop application?

• A.A revenue calculation spreadsheet supported with price and volume reports from the production department
• B.An accounts receivable reconciliation spreadsheet used by the accounting manager to verify balances.
• C.An ad-hoc inventory listing spreadsheet comprising details of written-off inventory quantitates
• D.An asset retirement calculation spreadsheet comprised of multiple formulas and assumptions

Comment: *

Name: *

Email: *

Verification: *

A large hospital has an existing contract with a vendor in another country to provide software support and maintenance of the hospital's patient records information system. From the hospital management's perspective, which of the following controls would be most effective to address privacy risks related to this outsourcing arrangement?

• A.Include a "right to audit" clause in the contract and impose detailed security obligations on the outsourced vendor
• B.Implement mandatory privacy training for management to help with identifying privacy risks when outsourcing services
• C.Develop an incident monitoring and response plan to track breaches from internal and external sources
• D.Conduct periodic reviews of the privacy policy to ensure that the existing policy meets current legislation requirements in both regions.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is not included in the process of user authentication?

• A.Verification.
• B.Identification.
• C.Validation.
• D.Authorization.

Comment: *

Name: *

Email: *

Verification: *

An internal auditor performed a review of IT outsourcing and found that the service provider was failing to meet the terms of the service level agreement. Which of the following approaches is most appropriate to address this concern?

• A.The organization should ensure that there is a clear management communication strategy and path for evaluating and reporting on all outsourced services concerns.
• B.The organization should review the skill requirements and ensure that the service provider is maintaining sufficient expertise and retaining skilled resources.
• C.The organization should work with the service provider to review the current agreement and expectations relating to objectives, processes, and overall performance.
• D.The organization should proactively monitor the performance of the service provider, escalate concerns, and use penalty clauses in the contract where necessary.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a major advantage of decentralized organizations, compared to centralized organizations?

• A.Decentralized organizations streamline organizational structure.
• B.Decentralized organizations tend to be less expensive to operate.
• C.Decentralized organizations tend to be more responsive to market changes.
• D.Decentralized organizations are more focused on organizational goals.

Comment: *

Name: *

Email: *

Verification: *