CISA Certified Information Systems Auditor – Question1384

Which of the following would MOST effectively detect a condition where an employee assigned to an operations role could perform system administrator functions?

A.
User access review
B. System review
C. Business process review
D. Entitlement design review

Correct Answer: A