Auditors of ERP systems
A. need not be concerned about segregation of duties because these systems possess strong computer controls.
B. focus on output controls such as independent verification to reconcile batch totals.
C. are concerned that managers fail to exercise adequate care in assigning permissions.
D. do not view the data warehouse as an audit or control issue at all because financial records are not stored there.
E. need not review access levels granted to users because these are determined when the system is configured and never change.
Answer: C
You might also like to view...
A(n) ____________________ constructor converts its argument to an object of the constructor's class.
Fill in the blank(s) with the appropriate word(s).
The period of time during which an IDPS monitors network traffic to observe what constitutes normal network behavior is referred to as which of the following?
A. training period B. baseline scanning C. profile monitoring D. traffic normalizing