Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

Access control software ensures that only authorized users gain access to a system through a process of identification and authentication.

The user manual gives detailed instructions to computer operators and to data control about a particular application.

IT governance is a process that ensures that the organization's IT sustains and extends the organization's strategies and objectives.

The system of controls used in this text consists of the control environment, pervasive control plans, IT general controls, and business process and application control plans.

When segregation of duties cannot be effectively implemented because the organization is too small, we may rely on a more intensive implementation of other control plans such as personnel control plans. This is called:

A mechanism by which a company is reimbursed for any loss that occurs when an employee commits fraud is called a:

This logs and monitors who is on or trying to access an organization's network.

A(n) ______________________________ uses many computers, called zombies, that unwittingly cooperate in a denial-of-service attack by sending messages to the target Web site.

______________________________ is when a hacker calls and requests a password based on some pretext.

In an information systems organizational structure, the function of ____ is the central point from which to control data and is a central point of vulnerability.

The ______________________________ function provides efficient and effective operation of the computer equipment by performing tasks such as mounting tapes, disks, and other media and monitoring equipment operation.

Managing functional units such as networks, CAD/CAM and systems programming typically is a major duty of:

Computer software that is used to facilitate the execution of a given business process is called ______________________________.

Periodic cleaning, testing, and adjusting of computer equipment is referred to as preventative maintenance.

Training materials help users learn their jobs and perform consistently in those jobs.

The first list below contains 10 control plans discussed in Chapter 8. The second list describes 10 system failures that have control implications. Required: On the answer line to the left of each system failure, insert the capital letter from the first list of the best control plan to prevent the system failure from occurring. (If you can't find a control that will prevent the failure, then choose a detective or corrective control plan). A letter should be used only once.

The terms ______________________________ planning, disaster recovery planning, business interruption planning, and business continuity planning have all been used to describe the backup and recovery control plans designed to ensure that an organization can recover from a major calamity.

A(n) ______________________________ is a technique to protect one network from another "untrusted" network.

______________________________ is a process that employs mathematical algorithms and encryption keys to encode data (i.e., change un-encoded data, called plaintext, to a coded text form, called ciphertext) so that it is unintelligible.

Business continuity planning is the process that identifies events that may threaten an organization and provide a framework whereby the organization will continue to operate when the threatened event occurs or resume operations with a minimum of disruption.