Question 1

The chief information officer (CIO) prioritizes and selects IT projects and resources.

Accepted Answer

False

Question 2

The IS function of quality assurance conducts reviews to ensure the attainment of IT objectives.

Accepted Answer

The statement is true. The IS function of quality assurance is responsible for conducting reviews and assessments to ensure that the IT objectives are achieved effectively and efficiently. This assists in detecting and resolving any potential issues or gaps in the IT processes within the organization.

Question 3

The IS function with the principal responsibilities of ensuring the security of all IT resources is data control.

Accepted Answer

The IS function is responsible for ensuring the security of IT resources, but data control is only one of its responsibilities, which includes managing the IT infrastructure, implementing security measures, handling incidents and breaches, and providing support and training for users. Data control refers to the management, processing, and protection of data, but it is not the main focus of the IS function.

Question 4

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

Accepted Answer

The data control group within a data center is indeed responsible for managing the flow of work into and out of the data center, ensuring errors are identified and corrected, and overseeing the error correction process to maintain data integrity and operational efficiency.

Question 5

Segregation of duties consists of separating the four functions of authorizing events, executing events, recording events, and safeguarding the resources resulting from consummating the events.

Accepted Answer

Segregation of duties is the practice of dividing the four functions of authorizing events, executing events, recording events, and safeguarding resources among different individuals or teams to reduce the risk of errors or fraud by a single person having too much control. Therefore, the statement is true.

Question 6

The IS function with the responsibility of guiding the IT organization in establishing and meeting user information requirements is the IT steering committee.

Accepted Answer

The answer of The IS function with the responsibility of...

Question 7

Embezzlement is a fraud committed by two or more individuals or departments.

Accepted Answer

Embezzlement is a fraud committed by an individual who has been entrusted with someone else's property or money. It does not require the involvement of two or more individuals or departments.

Question 8

According to COBIT, IT resources include applications, information, infrastructure, and people.

Accepted Answer

COBIT defines IT resources as consisting of applications, information, infrastructure, and people.

Question 9

The system of controls used in this text consists of the control environment, pervasive control plans, IT general controls, and business process and application control plans.

Accepted Answer

The text mentions the use of control environment, pervasive control plans, IT general controls, and business process and application control plans, indicating the use of a system of controls. Therefore, option A is true.

Question 10

Individual departments coordinate the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

Typically, the coordination of organizational and IT strategic planning processes, along with the review and approval of the strategic IT plan, is a centralized effort involving top management and IT leadership rather than being solely managed by individual departments.

Question 11

According to COBIT, IT resources must be managed by IT control processes to ensure that an organization has the information it needs to achieve its objectives.

Accepted Answer

COBIT (Control Objectives for Information and Related Technology) is a framework that provides guidelines and best practices for IT governance and management. According to COBIT, IT resources must be managed by IT control processes to ensure that an organization has the information it needs to achieve its objectives. This means that IT control processes are essential for effective IT governance and management.

Question 12

The systems development function provides efficient and effective operation of the computer equipment.

Accepted Answer

The systems development function is responsible for developing and implementing new computer systems or applications, not the operation of the equipment itself. That responsibility falls under the operations function.

Question 13

The function composed of people, procedures, and equipment and is typically called the information systems department, IS department, or the IT department is the information systems organization.

Accepted Answer

The information systems organization, often referred to as the information systems department, IS department, or IT department, is indeed composed of people, procedures, and equipment dedicated to managing and facilitating the use of information technology and systems within an organization.

Question 14

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called resource controls.

Accepted Answer

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called compensating controls, not resource controls. Compensating controls are designed to mitigate the risk when segregation of duties cannot be fully achieved.

Question 15

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Accepted Answer

The policy of requiring an employee to alternate jobs periodically is known as job rotation, not forced vacations. Forced vacations refer to mandated time off from work, usually as a disciplinary measure, and is not the same as job rotation.

Question 16

The information systems function is synonymous with the accounting function.

Accepted Answer

The information systems function and the accounting function are related and may work closely together, but they are not synonymous. The information systems function encompasses a broader range of activities related to technology, data storage, and information management.

Question 17

The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process.

Accepted Answer

The passage states that "The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process."

Question 18

Within the data center, the data librarian function grants access to programs, data, and documentation.

Accepted Answer

The data librarian function is responsible for managing and controlling access to programs, data, and documentation within the data center.

Question 19

IT governance is a process that ensures that the organization's IT sustains and extends the organization's strategies and objectives.

Accepted Answer

IT governance is aimed at aligning IT activities with the organization's objectives and ensuring that it supports and enhances them. It involves decision-making, risk management, and performance monitoring to ensure that IT investments deliver value to the organization. Therefore, the statement is true.

Question 20

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

Accepted Answer

Segregation of duties is a fundamental principle of internal controls that requires authorizing, recording, and executing activities to be separated among different individuals to prevent fraud and errors. Combining the functions of authorizing and executing events may result in a conflict of interest or inappropriate use of power, making it a violation of the segregation of duties principle.

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls