Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

In an on-line computer system,restricting user access to programs and data files includes all of the following except:

Watching a user type in passwords or user IDs or listening as they give account information over the phone is called ______________________________.

The information systems function is synonymous with the accounting function.

The systems development function provides efficient and effective operation of the computer equipment.

Quality assurance function:

The ______________________________ describes user procedures for an application and assists the user in preparing inputs and using outputs.

Computer software that is used to facilitate the execution of a given business process is called ______________________________.

Protecting resources against environmental hazards might include all of the following control plans except:

According to COBIT,IT resources include applications,information,infrastructure,and people.

The system of controls used in this text consists of the control environment,pervasive control plans,IT general controls,and business process and application control plans.

The IS function with the responsibility of guiding the IT organization in establishing and meeting user information requirements is the IT steering committee.

The site that maintains copies of a primary computing site's programs and data is a(n)______________________________ site.

A facility usually comprised of air-conditioned space with a raised floor,telephone connections,and computer ports,into which a subscriber can move equipment,is called a hot site.

______________________________ is when a hacker calls and requests a password based on some pretext.

From the standpoint of achieving the operations system control goal of security of resources,which of the following segregation of duties possibilities is least important?

A warehouse clerk manually completing an order document and forwarding it to purchasing for approval is an example of:

A control plan that is designed to detect a fraud by having one employee periodically do the job of another employee is called:

The functions of the ______________________________ commonly include assigning passwords and making sure the IT organization is secure from physical threats.

All of the following are components of a backup and recovery strategy except:

Copies of important stored data,programs,and documentation made periodically are called ______________________________.