An IS auditor would MOST likely recommend that IT management use a balanced scorecard to:
Proper segregation of duties does not prohibit a quality control administrator from also being responsible
for change control and problem management. True or false?
An integrated test facility is not considered a useful audit tool because it cannot compare processing output with independently calculated data. True or false?
Which of the following is the BEST way for an information security manager to justify continued investment in the information security program when the organization is facing significant budget cuts?
Which of the following would provide the MOST assurance that an application will work in a live environment?