Certified Information Systems Auditor (CISA) — Question 587

Which of the following controls is BEST implemented through system configuration?

Answer options

• A. Application user access is reviewed every 180 days for appropriateness.
• B. Network user accounts for temporary workers expire after 90 days.
• C. Computer operations personnel initiate batch processing jobs daily.
• D. Financial data in key reports is traced to source systems for completeness and accuracy.

Correct answer: B

Explanation

Option B is correct because system configuration can automate the expiration of temporary user accounts after a specified timeframe. The other options involve processes or reviews that typically require manual intervention or oversight, rather than being effectively implemented through system settings.