Section: Volume D
Explanation/Reference:

Section: Volume D

Explanation/Reference:
Explanation:
For effective post-implementation review the business measurements up front is established during the project.
Incorrect Answers:
B: Executing sufficient number of business cycles in the new system is done after the completion of the project.
C, D: Identifying the information to be reviewed and information collected during each stage of project is done in pre-project phase and not during project for effective post-implementation review.

The principles of access controls focus on availability, integrity, and confidentiality, as loss or
danger is directly related to these three:
Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred
to as loss of confidentiality.
Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes
unauthorized changes to a Web site is referred to as loss of integrity.
Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is
down so data files aren't available comes under loss of availability.

Explanation/Reference:
Explanation:
Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected.
Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities.
Controls have three primary objectives:
Prevent

Recover

Detect

Incorrect Answers:
A, B, C: One or more objectives stated in these choices is not correct objective of control.