English
Menu

IT Service Management and Systems Audit

Within the "response to IT" in internal control, which of the following is an IT general control?

  1. AChanges to programs in the production environment are deployed to production only after approval and testing, and by a person other than the developer
  2. BOn the order entry screen, an entry is rejected if the customer code is not registered in the master data
  3. CThe system automatically calculates the invoice amount from the unit price and quantity
Show answer and explanation

Answer: A. Changes to programs in the production environment are deployed to production only after approval and testing, and by a person other than the developer

Controls in response to IT are divided into IT general controls and IT application controls. IT application controls are built into individual business systems and ensure that transaction data are processed correctly; input data checks and automatic calculations are examples. IT general controls maintain an environment in which application controls work effectively and cover system development and maintenance, operations management, access management, management of outsourcing and so on. Approval of program changes and separating development from deployment to production are IT general controls.

  • A. Correct. Managing program changes and separating these duties are IT general controls.
  • B. This is an input data check, which is an IT application control.
  • C. This is an automatic calculation by the system, which is an IT application control.
Practice this topic Back to topic

Books on IT Service Management and Systems Audit Ad

As an Amazon Associate I earn from qualifying purchases.

More IT Service Management and Systems Audit questions

  1. Which of the following describes the approach of IT service management appropriately?
  2. Which of the following is a document in which an IT service provider collects the list of IT services that users can choose and use, together with the description of each, its conditions of use, its standard service levels and how to request it or make inquiries?
  3. To achieve the service levels promised to users in an SLA, an IT service provider agrees with the network operations department and other departments within the same organization on the content and level of the work each is responsible for. Which of the following is this agreement?
  4. Which of the following is the most appropriate service level item to agree on with users in the SLA for a company's internal expense reimbursement system?
  5. Which of the following is an appropriate activity of service level management?