nerdexam
Isaca

CISA · Question #522

A payroll manager discovers that fields in certain payroll reports have been modified without authorization. Which of the following is the MOST likely reason for this control weakness?

The correct answer is B. The programmer has access to the production programs. Unauthorized modification of payroll report fields most likely indicates that a programmer retained access to production programs. This violates segregation of duties, allowing unauthorized code or data changes without detection and posing a significant risk to data integrity…

Submitted by lucia.co· Apr 18, 2026Protection of Information Assets

Question

A payroll manager discovers that fields in certain payroll reports have been modified without authorization. Which of the following is the MOST likely reason for this control weakness?

Options

  • AThe programmer did not involve the user in testing.
  • BThe programmer has access to the production programs.
  • CPayroll application audit logs are not enabled.
  • DData entry personnel were not adequately trained.

How the community answered

(35 responses)
  • A
    11% (4)
  • B
    80% (28)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Unauthorized modification of payroll report fields most likely indicates that a programmer retained access to production programs. This violates segregation of duties, allowing unauthorized code or data changes without detection and posing a significant risk to data integrity and security.

Topics

#Separation of Duties#IT Controls#Production Access#Data Integrity

Community Discussion

No community discussion yet for this question.

Full CISA Practice