Which of the following statements would you expect to read in a company memo arguing against the use of the systems development life cycle as a form of internal control?
A)The risks associated with the SDLC are unknown.
B)The SDLC does not help achieve all four objectives of internal control.
C)The SDLC is not recognized by COSO.
D)The SDLC has no relationship to internal control.

Question

Quizplus · Accepted Answer

The SDLC may be considered insufficient as an internal control as it does not necessarily address all four objectives of internal control, namely, effectiveness and efficiency of operations, reliability of financial reporting, compliance with applicable laws and regulations, and safeguarding of assets. The other options are not valid arguments against the use of the SDLC as a form of internal control.

Which of the Following Statements Would You Expect to Read