During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?
I.Implement a test environment to ensure that testing is not performed in the production environment.
II.
Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.
III.
Eliminate access by developers to the production environment.

Which of the following performance criteria would be most useful when measuring the performance of a customer service desk?

Questions used to interrogate individuals suspected of fraud should:

Which of the following factors would not be considered in determining appropriate follow-up procedures?

Which of the following best describes external benchmarking using trend analysis for a subsidiary of an international company?