Monster Company has an in-house information systems department of 50 people. The company generally does its own programming, although some software was acquired as a software package. A software package was purchased for customer relationship management, which will be modified by the programming staff.

Procedures for implementing programs vary by department. All major changes are approved by the Management Information Systems steering committee. The committee is also given a list of the maintenance changes that are planned in the coming year. Some departments request that the data processing department handle testing, while other users are rather picky and want to do their own testing. Requirements are generally prepared in writing, although small maintenance changes may be handled verbally.

a) Assess inherent risk associated with program changes. provide 3.

b) What is your conclusion and impact of the inherent risk associated with program changes at Monster. Explain.