Question 1

As an IT resource, applications are automated systems and manual procedures that process information.

Accepted Answer

Applications are indeed automated systems and manual procedures that process information.

Question 2

Within the data center, the data librarian function grants access to programs, data, and documentation to authorized personnel only.

Accepted Answer

The data librarian function is responsible for managing and granting access to programs, data, and documentation within the data center. They ensure that only authorized personnel are able to access this information to maintain security and confidentiality.

Question 3

As used in the text, the information systems organization (function) is synonymous with the accounting function.

Accepted Answer

The text does not equate the information systems organization/function with the accounting function. They are two separate functions within a company.

Question 4

As an IT resource, information includes data in all their forms that are input, processed and output by information systems.

Accepted Answer

This statement is true. Information refers to data that are processed by information systems, including their input and output.

Question 5

The chief information officer (CIO) prioritizes and selects IT projects and resources.

Accepted Answer

The answer of The chief information officer (CIO) prioritizes and...

Question 6

The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process.

Accepted Answer

The answer of The functions of the security officer commonly...

Question 7

The function composed of people, procedures, and equipment that is typically called the information systems department, IS department, or the IT department is the information systems organization.

Accepted Answer

This statement is true. The information systems organization is made up of people, procedures, and equipment typically found in the department responsible for managing and maintaining information systems, also known as the information systems department, IS department, or IT department.

Question 8

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called resource controls.

Accepted Answer

A small organization that does not have enough personnel to adequately segregate duties must rely on alternative controls, commonly called compensating controls, not resource controls. Compensating controls are designed to mitigate the risk when segregation of duties cannot be fully achieved.

Question 9

The IS function with the principal responsibilities of insuring the security of all information systems function resources is data control.

Accepted Answer

The principal responsibility of the IS function for ensuring the security of information system function resources is information security. Data control is a subset of information security that involves the management of data within an organization.

Question 10

The IS function with the responsibility of guiding the IT organization in establishing and meeting user information requirements is the IT steering committee.

Accepted Answer

The IT steering committee is responsible for guiding the IT organization in establishing and meeting user information requirements, among other things.

Question 11

The system of controls used in this text consists of the control environment, pervasive control plans, IT general controls, and business process (and application) control plans.

Accepted Answer

The text explicitly states that the system of controls used consists of these four components.

Question 12

The policy of requiring an employee to alternate jobs periodically is known as forced vacations.

Accepted Answer

The policy of requiring an employee to alternate jobs periodically is known as job rotation, not forced vacations. Forced vacations refer to when an employer requires an employee to take time off work, typically unpaid, for a specific period of time.

Question 13

Individual departments coordinate the organizational and IT strategic planning processes and reviews and approves the strategic IT plan.

Accepted Answer

Typically, the coordination of organizational and IT strategic planning processes, along with the review and approval of the strategic IT plan, is a centralized effort involving top management and IT leadership rather than being solely managed by individual departments.

Question 14

Segregation of duties consists of separating the four functions of authorizing events, executing events, recording events, and safeguarding the resources resulting from consummating the events.

Accepted Answer

Segregation of duties involves separating the four functions mentioned to prevent any single individual from having complete control over a transaction from initiation to completion.

Question 15

IT governance leads to better organizational performance such as profitability.

Accepted Answer

IT governance ensures that IT investments are aligned with business objectives, reduces risks, and improves decision-making processes. As a result, this can lead to better organizational performance, including increased profitability.

Question 16

The IS function of systems development provides efficient and effective operation of the computer equipment by performing tasks such as mounting tapes and disks, loading printer paper, and responding to computer messages.

Accepted Answer

The IS function of systems development focuses on creating and maintaining information systems, not on operational tasks like mounting tapes or loading printer paper, which are typically handled by IT operations or support staff.

Question 17

Combining the functions of authorizing and executing events is a violation of the organizational control plan known as segregation of duties.

Accepted Answer

Segregation of duties is a crucial element of organizational internal control, which necessitates dividing tasks and responsibilities among multiple people to prevent errors or fraud. Combining the functions of authorizing and executing events means that one person has complete control over an operation, increasing the risk of errors or deliberate fraud. Therefore, it is a violation of this control plan.

Question 18

Embezzlement is a fraud committed by two or more individuals or departments.

Accepted Answer

Embezzlement is a fraud committed by an individual who misappropriates funds entrusted to them. It does not require the involvement of multiple individuals or departments.

Question 19

The IS function of quality assurance conducts reviews to ensure the attainment of IT customer requirements.

Accepted Answer

The statement correctly describes the role of the quality assurance function in IT, which is to review processes and products to ensure that they meet the requirements of customers or stakeholders.

Question 20

Within the data center, the data control group is responsible for routing all work into and out of the data center, correcting errors, and monitoring error correction.

Accepted Answer

The data control group within a data center is indeed responsible for managing the flow of work into and out of the data center, ensuring errors are identified and corrected, and overseeing the error correction process to maintain data integrity and operational efficiency.

Quiz 8: Controlling Information Systems: Introduction to Pervasive Controls