1. An employee in the IT department manipulates a program so that certain employees receive higher commissions than allowed. This is an example of:

a. access risk

b. system reliability and information integrity risk

c. confidentiality and privacy risk

d. fraud and malicious acts risk

2. An _____ refers to any system that collects, stores, and processes business data to produce information for making decisions in a business process

1. Database control system
2. Supply chain management (SCM) system
3. Enterprise risk management (ERP) system
4. Accounting information systems (AIS)

3. A custom software package that a company is using calculates state sales tax incorrectly. This is an example of:

a. access risk

b. system reliability and information integrity risk

c. confidentiality and privacy

d. fraud and malicious acts risk

4. The main bank of servers at a Web hosting company fails, causing a companys e-commerce Web site to be unavailable. This is an example of:

1. Selection risk
2. Development/acquisition and deployment risk
3. Availability risk
4. Hardware/software risk

5. ____ involves the computer-to-computer exchange of business documents in electronic form between organization and its trading partners.

1. ERP
2. EDI
3. VAN
4. COBIT

6. A computer program allows unauthorized personnel to login to the central data processing center. This is an example of:

1. Access risk
2. System reliability and information integrity risk
3. Confidentiality and privacy risk