IIA-ACCA practice question 22 of 35

An internal auditor is reviewing physical and environmental controls for an IT organization. Which control activity should not be part of this review?

Full set: 604 questions
Answer options
A: Develop and test the organization's disaster recovery plan.
B: Install and test fire detection and suppression equipment.
C: Restrict access to tangible IT resources.
D: Ensure that at least one developer has access to both systems and operations. Correct answer
Correct Answer:
D. Ensure that at least one developer has access to both systems and operations.
Scroll to Top