Which of the following findings related to segregation of duties should be of GREATEST concern to an IS auditor?
The person who tests source code also approves changes.
The person who administers servers is also part of the infrastructure management team.
The person who creates new user accounts also modifies user access levels.
The person who edits source code also has write access to production.
Submit