Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

A fidelity bond indemnifies a company in case it suffers losses from defalcations committed by its employees.

With continuous data protection (CDP)all data changes are data stamped and saved to secondary systems as the changes are happening.

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate when the threatened event occurs or resume operations with a minimum of disruption.

COBIT was developed to:

Which of the following control plans is not a retention control plan?

______________________________ controls restrict access to data,programs and documentation.

The ______________________________ maintains custody of and controls access to programs,files,and documentation.

The ______________________________ documentation portion of application documentation provides an overall description of the application,including the system's purpose;an overview of system procedures;and sample source documents,outputs,and reports.

______________________________ are documents that help users learn their jobs and perform consistently in those jobs.

Approving a customer credit purchase would be an example of which basic events processing function?

Segregation of duties consists of separating the four functions of authorizing events,executing events,recording events,and safeguarding the resources resulting from consummating the events.

The terms ______________________________ planning,disaster recovery planning,business interruption planning,and business continuity planning have all been used to describe the backup and recovery control plans designed to ensure that an organization can recover from a major calamity.

The most common biometric devices perform retinal eye scans.

Forced vacations is a policy of requiring an employee to take leave from the job and substitute another employee in his or her place.

Managing functional units such as networks,CAD/CAM and systems programming typically is a major duty of:

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls,commonly called ______________________________.

When segregation of duties cannot be effectively implemented because the organization is too small,we may rely on a more intensive implementation of other control plans such as personnel control plans.This is called:

Data encryption is a process that codes data to make it readable to human eye.

One method for circumventing segregation of duties is ______________________________ between one or more persons (or departments)to exploit a system and conceal an abuse such as fraud.

Systems documentation provides an overall description of the application,including the system's purpose;an overview of system procedures;and sample source documents,outputs,and reports.