As part of the SOC 2 Type 2 engagement you are working on, the audit program requires you to review the client’s access control matrix for its electronic funds transfer application. The audit objective in performing this procedure is to determine
Question 14 options:
1)
which network devices have management authorized authenticated users to use
2)
if authentication controls have been implemented
3)
that the user's authentication credentials match their authorization privileges
4)
which portions of the application can users use