Câu 129: IIA-CIA-PART1: Certified Internal Auditor - Part 1 The Internal Audit Activitys Role in Governance Risk and Control

Which of the following statements regarding segregation of duties is true?

1. A. When evaluating an organization's policy on segregation of duties, employee competence does not need to be considered.
2. B. An organizational chart provides an accurate definition of segregation of duties.
3. C. A restrictive segregation-of-duties policy can help improve an organization's communication.
4. D. Policies on segregation of duties in information systems must recognize the difference between logical and physical access to assets. — đáp án hiện tại