B) FERPA

A) GDPR

C) HIPAA

D) PCI-DSS

A firewall blocking unauthorized traffic

A password policy

A security camera recording activity

A data encryption system

B) The entire IT environment and infrastructure

C) End-user training programs

A) A specific financial application only

D) Marketing and sales strategies

Application Control

Corrective Control

Operational Control

IT General Control

A) Risk Identification

B) Risk Assessment

D) Monitoring and Reporting

C) Risk Mitigation

D) Reputational Risk

B) Strategic Risk

A) Operational Risk

C) Compliance Risk

B) Reliable Evidence Gathering

C) Auditor Independence

D) Risk Assessment

Professional Judgment

D) Standardize project management practices

A) Improve software programming efficiency

B) Provide a framework for an Information Security Management System (ISMS)

C) Govern financial reporting controls

D) Financial transaction auditing

A) Software development methodologies

B) Broad IT governance and management

C) Physical security controls

To develop new software applications

To increase the budget of the IT department

To ensure the integrity and security of IT systems to support organizational objectives

To reduce IT staff