Easy2 marksMultiple Choice
Audit and AssuranceSection ASyllabus Area CInternal ControlsIT Controls

ACCA · Question 09 · Audit and Assurance

CASE 2: AGRIGROW TECH LTD

AgriGrow Tech Ltd develops automated drone-based irrigation systems. They employ 500 seasonal workers during peak harvest. The payroll master file is updated by the HR clerk, who also processes the weekly payroll run. Seasonal workers are paid in cash. The warehouse manager orders drone parts, receives the goods, and authorizes the purchase invoices for payment. AgriGrow recently implemented a new cloud-based inventory system, but the IT manager left, leaving the system with no password complexity requirements.

QUESTION:
The lack of password complexity requirements in the new cloud-based inventory system is a deficiency in which type of control?

Answer options:

A.

IT Application Controls (Input Completeness)

B.

IT General Controls (Logical Access)

C.

IT General Controls (Program Changes)

D.

IT Application Controls (Processing)

How to approach this question

Distinguish between IT General Controls (which apply to the whole system environment, like security and access) and IT Application Controls (which apply to specific transactions). Passwords control 'logical access' to the system.

Full Answer

B.IT General Controls (Logical Access)✓ Correct
IT General Controls (ITGCs) are policies and procedures that relate to many applications and support the effective functioning of application controls. Logical access controls (like passwords, biometrics, and user rights) are a key component of ITGCs, designed to prevent unauthorized access to the system.

Common mistakes

Confusing IT General Controls with IT Application Controls.

Practice the full ACCA AA — Audit and Assurance Practice Exam 4

18 questions · hints · full answers · grading

More questions from this exam