CISA Question 32

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Correct answer is A. SOD is maintained by restricting production access to Developers. Option B is not realistic because QA team are very unlikely to have elevated access allowing to bypass SOD controls.

• Chose A1

  In a controlled application development environment, the most important segregation of duties is between the person who implements changes into the production environment and the application programmer who develops or modifies the code.

• Chose B2

  In a controlled application development environment, the most important segregation of duties should be between the person who implements changes into the production environment and the quality assurance (QA) personnel. This segregation helps ensure that changes are thoroughly tested and verified by an independent party before being deployed to production, reducing the risk of errors and unauthorized changes.