CISA · Question #193
CISA Question #193: Real Exam Question with Answer & Explanation
The correct answer is D: An appropriate exception management process is in place. For critical transaction processing, the most important concern is what happens when something goes wrong - a job fails, produces incorrect output, or runs out of sequence. A robust exception management process ensures failures are detected promptly, escalated to the right people
Question
The PRIMARY focus for an IS auditor reviewing a job scheduling process used to manage critical transactions should be to validate which of the following?
Options
- AThere is a process to notify all users within the organization when job failures occur
- BLogs specific to scheduled jobs are purged on a weekly basis for reasons of confidentiality
- CAccess to scheduled jobs is limited to the relevant business owners
- DAn appropriate exception management process is in place
Explanation
For critical transaction processing, the most important concern is what happens when something goes wrong - a job fails, produces incorrect output, or runs out of sequence. A robust exception management process ensures failures are detected promptly, escalated to the right people, and resolved in a controlled manner, protecting data integrity and business continuity. Notifying all users for every failure (A) is too broad and impractical. Purging logs weekly (B) would actually destroy audit evidence needed for accountability. Limiting access to business owners (C) is a valid control but secondary, as business owners typically do not manage technical job scheduling.
Topics
Community Discussion
No community discussion yet for this question.