Question

During an audit of a financial application, the IS auditor notes that all users successfully log in using unique credentials and multifactor authentication. However, several junior clerks are able to approve wire transfers exceeding their assigned transaction limits. Which control weakness does this finding MOST directly indicate?

Accepted Answer

Inadequate authorization controls that do not enforce access rights after identity is verified

Answer

Weak authentication mechanisms that fail to verify user identity

Answer

Absence of an audit trail for user login activity

Answer

Insufficient password complexity requirements for privileged accounts