Do You Know About Information Technology General Controls? Trivia Quiz

1. Approving changes to the production environment is part of the IT Change Management Controls process.

True

False

Approving changes to the production environment is part of the Change Management Controls process. Members of the Change Management team also ensure that documentation is complete and up-to-date.

Explanation

Approving changes to the production environment is part of the Change Management Controls process. Members of the Change Management team also ensure that documentation is complete and up-to-date.

2. What is the minimum number of characters required for a user password?

7

8

6

5

Passwords must be a minimum of 8 characters; 1 character from 3 of these 4 categories; uppercase letter, lowercase letter, numeral, special character.

Explanation

Passwords must be a minimum of 8 characters; 1 character from 3 of these 4 categories; uppercase letter, lowercase letter, numeral, special character.

3. Our control documents apply to employees but not to contractors or consultants.

True

False

As stated in the IT Handbook (SOP8-37), the IT Control Documents apply to all ON Semiconductor sites including business units, manufacturing organizations, and support sites. Further, they apply to any and all employees, contractors, consultants, partners, vendors and other individuals or groups that access ON Semiconductor systems or information.

Explanation

As stated in the IT Handbook (SOP8-37), the IT Control Documents apply to all ON Semiconductor sites including business units, manufacturing organizations, and support sites. Further, they apply to any and all employees, contractors, consultants, partners, vendors and other individuals or groups that access ON Semiconductor systems or information.

4. "Review of User Access Rights" is an example of what type of control?

IT Operations

Change Management

Information Security

Project Controls

Review of User Access Rights allows management to review rights at regular intervals.

Explanation

Review of User Access Rights allows management to review rights at regular intervals.

5. Which one of the following is not an example of an IT Operation Control?

Help Desk

Information Backup

Business Continuity / Disaster Recovery

P.A.R.C.

P.A.R.C is part of the IT Project Control and stands for Project Approval Review Committee.

Explanation

P.A.R.C is part of the IT Project Control and stands for Project Approval Review Committee.

6. The IT Handbook is also referred to as:

12MONS

Intro to IT

SOP8-37

A security control

The IT Handbook contains key information to assist anyone who has access to ON Semiconductor’s systems and/or information about the policies that all individuals must adhere to when utilizing information technology resources and services.

Explanation

The IT Handbook contains key information to assist anyone who has access to ON Semiconductor’s systems and/or information about the policies that all individuals must adhere to when utilizing information technology resources and services.

7. IT Control Documents are BROAD IN SCOPE and have a LOW FREQUENCY OF CHANGE.

True

False

IT control documents are both broad in scope and have a low frequency of change. They are also mandatory.

Explanation

IT control documents are both broad in scope and have a low frequency of change. They are also mandatory.

8. Which of the following is not one of the four phases in the IT Project Management (PM) process?

Discovery

Planning

Deployment

Closure

There are four phases in the IT PM process: Discovery, Planning, Implementation, Closure.

Explanation

There are four phases in the IT PM process: Discovery, Planning, Implementation, Closure.

9. Where are our key IT control documents stored?

Agile

SharePoint

Cloud

HR

Agile is used by the entire company and is where Standard Operating Procedures, or SOPs, and other key documents are stored. Our ITGCs are also stored in Agile.

Explanation

Agile is used by the entire company and is where Standard Operating Procedures, or SOPs, and other key documents are stored. Our ITGCs are also stored in Agile.

10. How many key ITGC control documents are there?

4

5

6

8

The 5 key ITGC control documents are - Entity Level Controls - Project Controls - Information Security Controls - Change Management Controls - IT Operations Controls The IT Handbook (SOP8-37) is also considered an IT Control Document.

Explanation

The 5 key ITGC control documents are - Entity Level Controls - Project Controls - Information Security Controls - Change Management Controls - IT Operations Controls The IT Handbook (SOP8-37) is also considered an IT Control Document.