Page 144 - CITP

Knowledge checks

Use the following information to complete the following knowledge check questions.

Case

Management of ABC Corp. — a service organization and provider of material-based solutions for
electronic, acoustical, thermal, and coated metal applications and hosting services of industry-specific
data for its customers — has decided to make significant modifications to its inventory management
software applications. The IT operation has its own staff and IT director, who reports to the COO. The
company has offices in Riverside, Midway, and Bluff City, located in two states. The inventory system is
interfaced with the GL system, as is the revenue system, which is a custom application written by its own
staff. The inventory account is material to the balance sheet. The company has two applications
developers on staff and needs to rely on those individuals to develop, test, and migrate the software to
production. Because the company does not have an automated code promotion utility to control versions
and development processes, the IT manager does the following:

 Identifies and analyzes risk resulting from changes that will be required
 Assigns changes to developers so that each developer works on only those changes assigned to that
developer
 Assigns to the developer not responsible for a particular change the responsibility for testing the
change and migration to production
 Reviews any significant changes
 Locks versions following user acceptance testing to prohibit further changes prior to release into
production
The IT manager also relies on manual controls to manage the code version and migration. He therefore

 creates a manual log listing the version of the code copied to the development environment, along
with date and time, and manually tracks the migration to test and then to production; and
 separates the review of all version control procedures prior to moving the code to production from
those performed by the individual responsible for the IT function.

Knowledge check questions

1. Based on the information provided in this case, how would the prudent CITP rate the IT complexity?

a. Simple.
b. Mostly simple with some sophisticated aspects.
c. Sophisticated.
d. Moderate.

© 2019 Association of International Certified Professional Accountants. All rights reserved. 3-58