Certified Information Systems Auditor (CISA) — Question 1382

In a controlled application development environment, the MOST important segregation of duties should be between the person who implements changes into the production environment and the:

Answer options

• A. application programmer.
• B. quality assurance (QA) personnel.
• C. computer operator.
• D. systems programmer.

Correct answer: A

Explanation

The correct answer is A because it is crucial to separate the roles of those who develop the application from those who deploy it to prevent conflicts of interest and ensure proper checks and balances. The other roles, such as quality assurance, computer operator, and systems programmer, do not directly implement changes, making them less critical in this segregation of duties.