Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

In an online environment,______________________________ ensures that only authorized users gain access to a system through a process of identification (e.g. ,a unique account number for each user)and authentication.

A(n)______________________________ is a technique to protect one network from another "untrusted" network.

______________________________ identification systems identify authorized personnel through some unique physical trait such as fingers,hands,voice,eyes,face,and writing dynamics.

A key control concern is that certain people within an organization have easy access to applications programs and data files.The people are:

With the data replication strategy known as ______________________________ all data changes are data stamped and saved to secondary systems as the changes are happening.

This logs and monitors who is on or trying to access an organization's network.

Pervasive control plans:

A warehouse supervisor prepares a sales order listing items to be shipped to a customer and then signs it approving the removal of the items from the warehouse.The supervisor is performing which functions?

The disaster recovery strategy known as a(n)______________________________ is a fully equipped data center that is made available on a standby basis to client companies for a monthly subscriber's fee.

______________________________ is a process that employs mathematical algorithms and encryption keys to encode data (i.e. ,change un-encoded data,called plaintext,to a coded text form,called ciphertext)so that it is unintelligible.

The disaster backup and recovery technique known as electronic vaulting is a service whereby data changes are automatically transmitted over the Internet on a continuous basis to an off-site server maintained by a third party.

______________________________ in an internal control system means assessment by management to determine whether the control plans in place are continuing to function appropriately over time.

______________________________ documentation provides a description of an application computer program and usually includes the program's purpose,program flowcharts,and source code listings.

The use of IT resources for enterprise systems and e-business:

Embezzlement is a fraud committed by two or more individuals or departments.

The four events-processing functions that constitute the segregation of duties control plan are: Required: Below is a list of ten events-processing activities,five relating to the cycle of activities involved in processing a sales event and seven relating to the cycle for a purchase event.Classify each of the twelve activities into one of the four functional categories listed above by placing the letter A,B,C,or D on the answer line to the left of each number.You should use only one letter for each of the answers.

______________________________ controls provide assurance that all modifications to programs are authorized and documented,and that the changes are completed,tested,and properly implemented.

A data replication strategy where all data changes are data stamped and saved to secondary systems as the changes are happening is called:

A policy that requires employees to alternate jobs periodically is called:

The ______________________________ is charged with safeguarding the IT organization.