In 2007, a major U.S. financial institution hired a security firm to attempt to compromise its computer network
A week later, the firm reported that it had successfully entered the system without apparent detection and presented an analysis of the vulnerabilities that had been found. This is an example of a
A) preventive control.
B) detective control.
C) corrective control.
D) standard control.
B
You might also like to view...
In which of the following circumstances is an auditor most likely to rely on work done by internal auditors?
a. If financial statement amounts are material and the degree of subjectivity in evaluating the audit evidence is high b. If the internal auditors have concluded that the risk of material misstatement at the overall financial level is negligible c. For financial statement amounts judged by the auditor to require little or no subjectively evaluated audit evidence d. For financial statement amounts determined largely or entirely on the basis of estimates made by management
In the industrial world, college education and increased women in the workplace have increased the birthrate
Indicate whether the statement is true or false