By evaluating application development projects against the capability maturity model (CMM), an IS auditor should be able to verify that:
Which of the following controls MOST effectively reduces the risk associated with use of instant messaging (IM) in the workplace?
A proposed transaction processing application will have many data capture sources and outputs in paper
and electronic form. To ensure that transactions are not lost during processing, an IS auditor should
recommend the inclusion of:
An IS auditor is reviewing a sample of production incidents and notes that root cause analysis is not being performed. Which of the following is the GREATEST risk associated with this finding?
Security should ALWAYS be an all or nothing issue.
