CISA · Question #36
Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?
The correct answer is D. Process flowchart. A process flowchart is most useful for detecting weaknesses in segregation of duties because it visually maps out the steps and individuals involved in a specific business process. This visual representation allows auditors to identify points where a single individual might perfo
Question
Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?
Options
- AData flow diagram
- BSystems flowchart
- CEntity-relationship diagram
- DProcess flowchart
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- C11% (2)
- D78% (14)
Why each option
A process flowchart is most useful for detecting weaknesses in segregation of duties because it visually maps out the steps and individuals involved in a specific business process. This visual representation allows auditors to identify points where a single individual might perform conflicting duties.
A data flow diagram shows the movement of data through a system but doesn't necessarily detail the specific individuals or roles performing the tasks, making it less direct for duty segregation analysis.
A systems flowchart depicts the flow of data through an information system, including inputs, processing, and outputs, but may not clearly delineate specific human roles or their segregation of duties within processes.
An entity-relationship diagram illustrates the relationships between different data entities in a database, which is unrelated to the execution of business processes or segregation of duties.
A process flowchart explicitly illustrates the sequence of activities within a process, showing who performs each step and the flow of information or tasks between different roles. This visual representation is ideal for identifying instances where a single person or role performs incompatible functions that should be separated to prevent fraud or error, directly exposing segregation of duties weaknesses.
Concept tested: Segregation of duties analysis tools
Source: https://learn.microsoft.com/en-us/compliance/assurance/risk-management-in-the-cloud
Topics
Community Discussion
No community discussion yet for this question.