nerdexam
Isaca

CISA · Question #36

Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?

The correct answer is D. Process flowchart. A process flowchart is most useful for detecting weaknesses in segregation of duties because it visually maps out the steps and individuals involved in a specific business process. This visual representation allows auditors to identify points where a single individual might perfo

Submitted by joshua94· Apr 18, 2026Information System Auditing Process

Question

Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?

Options

  • AData flow diagram
  • BSystems flowchart
  • CEntity-relationship diagram
  • DProcess flowchart

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    11% (2)
  • D
    78% (14)

Why each option

A process flowchart is most useful for detecting weaknesses in segregation of duties because it visually maps out the steps and individuals involved in a specific business process. This visual representation allows auditors to identify points where a single individual might perform conflicting duties.

AData flow diagram

A data flow diagram shows the movement of data through a system but doesn't necessarily detail the specific individuals or roles performing the tasks, making it less direct for duty segregation analysis.

BSystems flowchart

A systems flowchart depicts the flow of data through an information system, including inputs, processing, and outputs, but may not clearly delineate specific human roles or their segregation of duties within processes.

CEntity-relationship diagram

An entity-relationship diagram illustrates the relationships between different data entities in a database, which is unrelated to the execution of business processes or segregation of duties.

DProcess flowchartCorrect

A process flowchart explicitly illustrates the sequence of activities within a process, showing who performs each step and the flow of information or tasks between different roles. This visual representation is ideal for identifying instances where a single person or role performs incompatible functions that should be separated to prevent fraud or error, directly exposing segregation of duties weaknesses.

Concept tested: Segregation of duties analysis tools

Source: https://learn.microsoft.com/en-us/compliance/assurance/risk-management-in-the-cloud

Topics

#Segregation of Duties#Internal Controls#Process Flowcharts#Audit Techniques

Community Discussion

No community discussion yet for this question.

Full CISA Practice