Certified Information Systems Auditor (CISA) — Question 149

Which of the following findings should be of GREATEST concern to an IS auditor assessing the risk associated with end-user computing (EUC) in an organization?

Answer options

• A. Lack of defined criteria for EUC applications
• B. Lack of awareness training for EUC users
• C. Insufficient processes to track ownership of each EUC application
• D. Insufficient processes to test for version control

Correct answer: C

Explanation

The correct answer, C, highlights the critical need for tracking ownership of EUC applications to ensure accountability and management. Without proper ownership tracking, there is a higher risk of unauthorized changes and compliance issues. While options A, B, and D are also important, they do not address the core issue of accountability in application management as directly as option C does.