CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Information Systems
An IS auditor reviewing a bank's core banking system finds that the programmer who writes changes to the application code can also move those changes into the live production environment. Which control weakness does this primarily represent?
The weakness is lack of segregation of duties in change management. When the same programmer can write code and move it into production, unauthorised or untested changes can go live unnoticed. Development, testing and production migration should be performed or approved by different people.
- ALack of segregation of duties in change managementCorrect
- BAbsence of an off-site backup
- CWeak encryption of data in transit
- DInadequate system capacity planning
Explanation
Developers who can both write and promote code to production can introduce unauthorised or untested changes without detection. Good change management separates development, testing and production roles. The other options concern backup, encryption and capacity, which the facts do not describe.
Did you get it right without looking?
One question tells you little. A timed set on Information Systems shows your real accuracy, how long you take and where you lose marks.
More Information Systems questions
- Which of the following best describes a data warehouse as distinct from an operational (OLTP) database?
- Sharma Traders' manager uses a system that summarises monthly sales by region in periodic reports to monitor performance and take routine co…
- A Bengaluru fintech suffers a ransomware attack that encrypts its servers. Its backups are stored on a network drive permanently mounted to …
- A firm's database records an employee's department name and department head in every employee row, so changing a department head means editi…
- Aarav Textiles Ltd. keeps a fully equipped duplicate data centre in Pune with live data replication, so operations can switch over within mi…
- A retail chain integrates its purchase, inventory, finance and HR modules on a single database so that a goods receipt entry automatically u…