An IS auditor discovers evidence of fraud perpetrated with a managers user ID. The manager had written the password, allocated by the system administrator, inside his/her desk drawer. The IS auditor should conclude that the:

A. A. manager s assistant perpetrated the fraud.
B. B. perpetrator cannot be established beyond doubt.
C. C. fraud Must have been perpetrated by the manager.
D. D. system administrator perpetrated the fraud.

This question is part of CISA - Mock Test - Domain 1 (100 Questions)

Asked by Hemangdoshi, Last updated: Sep 04, 2018

+ AnswerRequest Answer

Share
...

Answer Anonymously
Answer Later

Copy Link

1 Answer

Hemangdoshi

Answered on Aug 20, 2018

B. perpetrator cannot be established beyond doubt.

The password control weaknesses means that any of the other three options could be true. Password security would normally identify the perpetrator. In this case, it does not establish guilt beyond doubt.