Which of the Following Is Not One of the Approaches

question 28

Multiple Choice

Which of the following is not one of the approaches used to achieve the management of an IT control framework?

• A)Information Systems Audit and Control Association control objectives for IT
• B)The International Organization for Standardization 17799, Code of Practice for Information Security Management
• C)The Information Technology Infrastructure Library
• D)Sarbanes-Oxley Act section on IT Controls

---

Definitions:

Marginal Costs

The additional cost incurred by producing one more unit of a product, which can vary as production scales.

Diseconomies of Scale

A situation where an increase in production leads to higher average costs for firms, contrary to economies of scale.

ATC

Average Total Cost, the total cost divided by the quantity of output produced; it's a measure of per-unit production cost.

MC

Short for marginal cost, it represents the change in total cost that arises when the quantity produced is incremented by one unit.