CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ101

Information System Auditing Process

A company requires approval for all program change requests (PCRs) and automatic logging of every modification. Which IS audit procedure will BEST determine whether unauthorized modifications have been made to production programs?

Explanation

Tracing a sample of program changes from the change log to completed PCR forms verifies that each logged production change has the required approved authorization. A logged change without a corresponding completed PCR indicates an unauthorized change.

Community Discussion

No comments yet. Be the first to start the discussion!