Exam 8: Controlling Information Systems: Introduction to Pervasive Controls

The process whereby lost data is restored and operations are continued is called ______________________________.

______________________________ documentation provides a description of an application computer program and usually includes the program's purpose, program flowcharts, and source code listings.

One method for circumventing segregation of duties is ______________________________ between one or more persons (or departments) to exploit a system and conceal an abuse such as fraud.

The functions of the security officer commonly include assigning passwords and working with human resources to ensure proper interview practices are conducted during the hiring process.

Watching a user type in passwords or user IDs or listening as they give account information over the phone is called ______________________________.

The systems development function provides efficient and effective operation of the computer equipment.

The ______________________________ group is responsible for routing all work in to and out of the data center, correcting errors, and monitoring all error correction.

______________________________ helps to solve the problem posed by single key cryptography by employing a pair of matched keys for each system user, one private (i.e., known only to the party who possesses it) and one public.

COBIT was developed to:

The IS function with the responsibility of guiding the IT organization in establishing and meeting user information requirements is the IT steering committee.

The ______________________________ gives detailed instructions to computer operators and to data control about a particular application.

Pervasive control plans:

The function composed of people, procedures, and equipment and is typically called the information systems department, IS department, or the IT department is the information systems organization.

In a(n) ______________________________ a Web site is overwhelmed by an intentional onslaught of thousands of simultaneous messages, making it impossible for the attacked site to engage in its normal activities.

Periodic cleaning, testing, and adjusting of computer equipment is referred to as ______________________________.

Listed below are several pervasive control plans discussed in Chapter 8. On the blank line to the left of each control plan, insert a "P" (preventive), "D" (detective), or "C" (corrective) to best classify that control. If applicable, more than one code may be inserted for each plan.

An outside auditing firm annually supervises a physical count of the items in a retail store's shelf inventory. This is an example of:

Alternative names for contingency planning include all of the following except:

The operations run manual describes user procedures for an application and assists the user in preparing inputs and using outputs.