The first concern of an IS auditor should be to establish that the proposal meets the needs of the business, and this should be established by a clear business case. Although compliance with security standards is essential, as is meeting the needs ofthe users and having users involved in the implementation process, it is too early in the procurement process for these to be an IS auditor's first concern.

The software for appliances is embedded into chips. Firmware-based firewall products cannot be moved to higher capacity servers. Firewall software that sits on an operating system can always be scalable due to its ability to enhance the power of servers. Host-based firewalls operate on top of the server operating system and are scalable. A demilitarized zone is a model of firewall implementation and is not a firewall architecture.

Explanation/Reference:
Explanation:
Correction of code should not be a responsibility of the quality assurance team as it would not ensure segregation of duties and would impair the team's independence. The other choices are valid quality assurance functions.

Section: Protection of Information Assets
Explanation:
The use of SQL facilitates portability. Verification of import and export procedures with other systems
ensures better interfacing with other systems, analyzing stored procedures/triggers ensures proper access/
performance, and reviewing the design entity- relation model will be helpful, but none of these contribute to
the portability of an application connecting to a database.