Certified Information Systems Auditor (CISA) — Question 501

The BEST way to determine whether programmers have permission to alter data in the production environment is by reviewing:

Answer options

• A. the access control system's configuration.
• B. how the latest system changes were implemented.
• C. the access rights that have been granted.
• D. the access control system's log settings.

Correct answer: C

Explanation

The correct answer is C because reviewing the access rights that have been granted provides direct insight into whether programmers have the necessary permissions. Option A focuses on the configuration, which may not reflect current permissions, while B discusses system changes without addressing permissions. Option D relates to log settings, which do not indicate actual access rights.