CISA Certified Information Systems Auditor – Question0879

Which of the following access control situations represents the MOST serious control weakness?

A.
Computer operators have access to system level flowcharts.
B. Programmers have access to development hardware.
C. End users have access to program development tools.
D. System developers have access to production data.

Correct Answer: C