Valid IIA-CIA-Part1 Dumps shared by ExamDiscuss.com for Helping Passing IIA-CIA-Part1 Exam! ExamDiscuss.com now offer the newest IIA-CIA-Part1 exam dumps, the ExamDiscuss.com IIA-CIA-Part1 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com IIA-CIA-Part1 dumps with Test Engine here:
During an assurance engagement, an internal auditor identified that a developer of the organization's enterprise resource planning (ERP) system had intentionally modified the production code to commit a fraudulent transaction. Which control activity should be implemented to prevent such issues in the future?
Correct Answer: A
Segregating duties between code development and migrating changes into production is a critical control to prevent fraudulent activities by developers. This control ensures that no single individual has the ability to develop code and deploy it to the production environment without oversight. Key benefits include: * Reducing the risk of unauthorized or malicious code changes. * Ensuring that changes are reviewed and tested by a different team before deployment. * Increasing accountability and transparency in the software development lifecycle. By implementing this control, organizations can prevent developers from committing fraud or making unapproved changes to the ERP system, thereby protecting the integrity and security of the system. References: * The Institute of Internal Auditors (IIA) Standards and Practice Advisories. * COBIT (Control Objectives for Information and Related Technologies) framework. * "Internal Auditing: Assurance & Advisory Services" by IIA, Chapter on IT General Controls and Segregation of Duties.