You are implementing Advanced Access Controls and there is a requirement for a control to monitor user
access to specific, client-defined access points which give users the ability to both initiate a purchase order and
approve payments on that purchase order.Which is a valid option to implement the control?
You are advising your client on design and configuration related to how access incident results will be viewedand managed. The client has provided a list of business requirements:Incident results can be viewed by DepartmentGroups of investigators receive assigned incidents based on DepartmentMust ensure systematically that no incident is unassigned to an investigatorWhich three must be configured to support these requirements? (Choose three.)
You have two segregation of duties requirements:1) a user can access either the supplier creation pages or the invoice pages, but not both.2) a user can access either the invoice creation pages or the payment creation pages, but not both.How must these requirements be met in Advanced Access Controls?
You are working with the customer to gather Risk-Control data for the data import process. The customer has
information in multiple formats. Which format should be used for importing the data?
An assessor is trying to complete an operational assessment on a control for manual AP Invoice entry and isreviewing Prior Results.Which statement is true about viewing Prior Results for this control?