a. Which one is a recommended control area that should be examined by IT auditors when auditing software acquisitions?

Feasibility study

Knowledge of available solutions

Supplier requirements and viability

All of the above

b. The following are examples of EDI risks except of audit trial Independence of confidentiality of sensitive information Loss of business continuity/going-concern problem

A potential risk associated with availability includes

Loss of the ability to process business transactions

Unauthorized access or disclosure of sensitive or valuable company data

Corrupted information Misuse of company information

c. Major information security standards include all of the following, except

Critical Path

COBIT

ISO/IEC 27001:2013

PCI DSS