CISA Certified Information Systems Auditor – Question0878

Which of the following is the GREATEST risk associated with in-house program development and customization?

A.
The lack of a test environment
B. The lack of a quality assurance function
C. The lack of secure coding expertise
D. The lack of documentation for programs developed.

Correct Answer: B