11.7k views
0 votes
Which of the following would the auditors consider to be a weakness in an IT system?

A) Operators have access to terminals.
B) Programmers are allowed access to the file library.
C) Reprocessing of exceptions detected by the computer is handled by a data control group.
D) More than one employee is present when the computer facility is in use.

User Abyx
by
7.9k points

1 Answer

2 votes

Final answer:

Auditors would likely consider programmers having access to the file library (Option B) as a weakness in an IT system because it could lead to unauthorized changes or breaches of data integrity.

Step-by-step explanation:

Auditors consider various aspects of an IT system to determine its reliability and security. When evaluating potential weaknesses in an IT system, one aspect that is often scrutinized is the level of access granted to different roles within the organization. In the options provided, one particular point of concern for an auditor would be B) Programmers are allowed access to the file library. This scenario poses a risk because programmers having unrestricted access to the file library can lead to a violation of data integrity or confidentiality. They could potentially modify, delete, or misuse the data without proper oversight, hence having tight controls and segregation of duties is critical in an IT environment. The other options, such as A) Operators have access to terminals, C) Reprocessing of exceptions detected by the computer is handled by a data control group, and D) More than one employee is present when the computer facility is in use generally represent good practices that reduce risk of error or fraud, by either providing necessary access for job functions, ensuring oversight by a specialized group, or implementing a form of dual control, respectively.

User Sarahjane
by
7.4k points