Câu 222: IIA-CIA-PART2: Certified Internal Auditor - Part 2 Conducting the Internal Audit Engagement

During a systems development audit, software developers indicated that all programs were moved from the development environment to the production environment and then tested in the production environment. What should the auditor recommend?I. Implement a test environment to ensure that testing is not performed in the production environment.II. Require developers to move modified programs from the development environment to the test environment and from the test environment to the production environment.III. Eliminate access by developers to the production environment.

1. A. I only
2. B. III only
3. C. I and II only
4. D. I and III only — đáp án hiện tại