1. Which one of the following personnel should normally have access to the computer room while an application program is being executed?
a. Systems programmer
b. Application programmer
c. Computer operator
d. Data control clerk
2. Which of the following actions provides the IS Auditor with the greatest assurance that certain weaknesses in internal control procedures have been corrected by management?
A. Discussing with management the corrective procedures that were implemented to strengthen the internal controls.
B. Obtaining a letter of representation from management stating that the weaknesses have been corrected.
C. Performing compliance tests and evaluating the adequacy of procedures that were implemented by management to correct the weaknesses.
D. Reviewing managements response to the weaknesses in their formal report to the Board of Directors audit committee.
Requests for access to production data should be approved by the:
a. data owner.
b. security officer.
c. programming manager.
d. operations manager.
3. Which of the following is MOST important when there is a lack of adequate fire detection and control equipment in the computer areas?
a. Adequate fire insurance
b. Regular hardware maintenance
c. Off-site storage of transaction and master files
d. Fully tested backup processing facilities