IIA-CIA-PART2 · Question #306
An internal auditor discovered that a new employee was granted inappropriate access to the payroll system Apparently the IT specialist had made a mistake and granted access to the wrong new…
The correct answer is D. Provide coaching to the IT specialist and introduce a secondary control to ensure system access is. The most effective management action to prevent similar issues in the future involves both corrective and preventive measures. Coaching the IT specialist addresses the immediate knowledge gap and mistake that occurred. Introducing a secondary control, such as a review or…
Question
An internal auditor discovered that a new employee was granted inappropriate access to the payroll system Apparently the IT specialist had made a mistake and granted access to the wrong new employee. Which of the following management actions would be most effective to prevent a similar issue from occurring again?
Options
- ARemove the new employee's excessive access rights and request that he report any future access
- BPerform a complete review of all users who have access to the payroll system lo determine
- CReview the system activity log of the employee to determine whether he used the inappropriate
- DProvide coaching to the IT specialist and introduce a secondary control to ensure system access is
How the community answered
(33 responses)- A3% (1)
- B9% (3)
- C6% (2)
- D82% (27)
Explanation
The most effective management action to prevent similar issues in the future involves both corrective and preventive measures. Coaching the IT specialist addresses the immediate knowledge gap and mistake that occurred. Introducing a secondary control, such as a review or verification step, ensures that future access requests are granted correctly, thereby preventing similar errors. This combination addresses the root cause and adds a layer of assurance.
Topics
Community Discussion
No community discussion yet for this question.