An IS auditor is reviewing documentation of application systems change control and identifies several patches that were not tested before being put into production. Which of the following is the MOST significant risk from this situation?
Which of the following would prevent accountability for an action performed, thus allowing nonrepudiation?
Which of the following is MOST important to consider when scheduling follow-up audits?
A third-party consultant is managing the replacement of an accounting system. Which of the following should be the IS auditor's GREATEST concern?
The purpose of a mainframe audit is to provide assurance that (choose all that apply):
