An IS auditor discovers that due to resource constraints, a database administrator (DBA) is responsible for developing and executing changes into the production environment. Which of the following should the auditor do FIRST?

A. Ensure a change management process is followed prior to implementation.

B. Identify whether any compensating controls exist.

C. Determine whether another database administrator (DBA) could make the changes.

D. Report a potential segregation of duties (SoD) violation.








 

Suggested Answer: B

Community Answer: B



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.