CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ81

Protection of Information Assets

Which of the following is the BEST compensating control when segregation of duties is absent in a small IS department?

Explanation

Reviewing transaction logs is a detective compensating control that can reveal unauthorized or inappropriate transactions when one person must perform otherwise incompatible duties. It provides oversight of activity that segregation of duties would ordinarily help prevent.

Community Discussion

No comments yet. Be the first to start the discussion!