The sixth objective in an IS audit is protecting data files. Select all of the following controls that would be effective in minimizing the threats to a company’s data files.

a. Storage of data in a secure file library and restriction of physical access to data files

b. Concurrent update controls

c. Data editing routines

d. Off-site backup of all data files

e. Thorough test of program changes, including user acceptance tests