Which of the following test makes sure the modified or new system includes appropriate access controls and does not introduce any security holes that might compromise other systems? 

Answer options:

A. Recovery testing
B. Security testing
C. Stress/volume testing
D. Interface testing

B

Security testing makes sure the modified or new system includes appropriate access controls and does not introduce any security holes that might compromise other systems. Recovery testing checks the system`s ability to recover after a software or hardware failure. Stress/volume testing involves testing an application with large quantities of data in order to evaluate performance during peak hours. Interface testing evaluates the connection of two or more components that pass information from one area to another. Source: Information Systems Audit and Control Association, Certified Information Systems Auditor 2002 review manual, Chapter 6: Business Application System Development, Acquisition, Implementation and Maintenance (page 300).