Skip to content

ACCA Strategic Professional · Advanced Performance Management · Technology and information systems

Brightmoor Bank pays regional managers a bonus based on a customer satisfaction index drawn from an analytics platform. Internal audit finds that several managers have access rights allowing them to edit survey records, and the edit log is not reviewed. Which risk is most significant, and what is the best response?

The main risk is managers manipulating survey data to inflate their own bonuses. The best response is to remove their edit rights through segregation of duties and have the edit logs reviewed independently. Extra servers, faster refreshes or archiving do nothing to address this conflict of interest.

  1. AData availability risk; add a second server
  2. BData manipulation to inflate rewards; restrict edit rights through segregation of duties and review edit logs independentlyCorrect
  3. CData timeliness risk; refresh the index more often
  4. DStorage cost risk; archive older survey records

Explanation

Managers whose pay depends on the index can alter its inputs, so the key risk is deliberate manipulation, undermining the reward system's integrity. The response is least-privilege access, segregation of duties and independent log review. Servers, refresh rates and archiving do not address the conflict of interest.

Did you get it right without looking?

One question tells you little. A timed set on Technology and information systems shows your real accuracy, how long you take and where you lose marks.

More Technology and information systems questions