CISA Certified Information Systems Auditor – Question0236

As part of an IS audit, the auditor notes the practices listed below. Which of the following would be a segregation of duties concern?

A.
Operators are degaussing magnetic tapes during night shifts.
B. System programmers have logged access to operating system parameters.
C. System programmers are performing the duties of operators.
D. Operators are acting as tape librarians on alternate shifts.

Correct Answer: D