Section: Protection of Information Assets
Explanation:
Normalization is a design or optimization process for a relational database (DB) that minimizes redundancy;
therefore, denormalization would increase redundancy. Redundancy which is usually considered positive
when it is a question of resource availability is negative in a database environment, since it demands
additional and otherwise unnecessary data handling efforts.
Denormalization is sometimes advisable for functional reasons. It should not cause loss of confidentiality,
unauthorized accesses or application malfunctions.

Explanation/Reference:
Explanation:
Proper segregation of duties does not prohibit a quality-control administrator from also being responsible for change control and problem management.

Section: The process of Auditing Information System

Section: Protection of Information Assets