Certified Information Systems Auditor (CISA) — Question 616

Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?

Answer options

• A. Data flow diagram
• B. Systems flowchart
• C. Entity-relationship diagram
• D. Process flowchart

Correct answer: D

Explanation

A Process flowchart is the most useful document for pinpointing weaknesses in segregation of duties as it outlines the specific tasks and responsibilities within a process. The other options, while useful for understanding systems and data relationships, do not provide the same level of detail regarding task assignments and potential conflicts in duties.