A review of IT interface controls finds an organization does not have a process to identify and correct records that do not get transferred to the receiving system.
Which of the following is the IS auditor's BEST recommendation?
A.
Automate the transfer of data between systems as much as feasible.
B.
Enable automatic encryption, decryption, and electronic signing of data files.
C.
Have coders perform manual reconciliation of data between systems.
D.
Implement software to perform automatic reconciliations of data between systems.
A is not the answer. It is only the transfer of data that is automated; the identification and correction of records that were not transferred is not something that can be done automatically.
D. Implement software to perform automatic reconciliations of data between systems.
Option A is a good practice, but it doesn't directly address the issue of identifying and correcting records that do not get transferred. Automation can help with data transfer efficiency but might not catch data transfer failures or errors.
Option B is important for data security but does not directly address the problem of identifying and correcting records that are not transferred correctly.
Option C is not an efficient solution as manual reconciliation can be time-consuming, error-prone, and costly. It's generally not the best practice for handling data discrepancies between systems.
Option D is the best recommendation. This option suggests using dedicated software that can automatically reconcile data between systems. Such software can identify discrepancies, missing records, and errors in data transfers, making the process more efficient and less prone to human error. It addresses the specific problem mentioned in the question and is a more robust and proactive solution.
Option D, implementing software to perform automatic reconciliations of data between systems, may be useful in identifying and correcting records that do not get transferred to the receiving system. However, it does not address the root cause of the problem, which is the lack of a process to identify and correct such records. Option A, automating the transfer of data between systems as much as feasible, addresses the root cause of the problem. By automating the transfer of data, the organization can reduce the risk of missing records and improve the efficiency and accuracy of the data transfer process. However, it is important to ensure that appropriate controls are in place to monitor and verify the completeness and accuracy of the data transfer.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Swallows
9 months agoSuperMax
1 year, 2 months ago3008
1 year, 4 months ago