QuestionQ12

ITIL Transformation

A legacy financial system requires users to manually enter the transaction time and date to satisfy regulatory requirements. A recent internal audit found that these fields are frequently left blank.

Which controls would effectively improve compliance?

  1. Modify the application so it automatically adds the current time and date when a transaction is entered.
  2. Establish a communications plan reminding users why transaction times and dates are important.
  3. Develop a goals cascade so all staff understand their role in meeting company goals.
  4. Create a report identifying non-compliant records and take corrective action.
  • A 1 and 2
  • B 2 and 3
  • C 3 and 4
  • D 1 and 4
Explanation

Automatic population of a transaction timestamp is a preventive control that reduces the likelihood of blank required fields. Reporting non-compliant records and correcting them is a detective and corrective control that identifies exceptions and remediates them. Together, these controls directly address incomplete transaction time and date data.

Community Discussion

No comments yet. Be the first to start the discussion!