Question

12. Regulatory compliance benefits organizationsl oAtrvrand SA0CS True/False Questions (1 point each) 13. An IT assessment is concerned about past results and performance, whereas an IT audit considers previous and current results as well as expected performance. A. True B. False 14. You use an audit to assess the presence and effectiveness of IT controls and to ensure that those controls are compliant with stated policies. A. True B. False 15. The TIX credit card breach initially occurred as a result of inadequate encryption of a wireless network used in one of TJX's retail stores. A. True B. False 16. Unlike the collapse of Enron and WorldCom, TJX did not break any laws. It was simply not compliant with stated payment card processing guidelines. A. True B. False Short Answer Questions (2 points each) 17. How does an IT audit differ from a security assessment?

Answer 1

Answer)
13. True, audit checks for the previous and current results and compliance and also about the future, whereas the IT assessment checks only the past records, performance.

14. True, audit allows us for assessing the presence and also effectiveness of the controls and to ensure that those controls are compliant with the standards and policies

15. True, TJX store used WEP which is currently not so secure and robust and thus due to this lapse in encryption the breach occurred

16. True, TJX did not break laws however it was using old and outdated encryption technology which was the problem