File checksums are values that are calculated from the contents of a file and can detect any changes or corruption in the file. They are used to verify that the files that are transferred or processed through system interfaces are not altered in any way. File checksums are more effective than periodic audits, file counts, or IT operator monitoring, which are other types of controls that can help ensure the integrity of system interfaces, but they are not as reliable or timely as file checksums.

Asking management why the regulatory changes have not been included is the first thing that an IS auditor should do during the planning stage of a compliance audit. An IS auditor should inquire about the reasons for not updating the inventory of compliance requirements with recent regulatory changes related to managing data risk. This will help the IS auditor to understand whether there is a gap in awareness, communication, or implementation of compliance obligations within the organization. The other options are not the first things that an IS auditor should do, but rather possible subsequent actions that may depend on management's response. References:
* CISA Review Manual (Digital Version), Chapter 2, Section 2.31
* CISA Review Questions, Answers & Explanations Database, Question ID 214

Comprehensive and Detailed Step-by-Step Explanation:Transposition and transcription errors occur when characters or numbers are accidentally swapped or misentered during data entry.
* Option A (Incorrect):Duplicate checks ensure that the same record is not entered twice but do not specifically detect transposition or transcription errors.
* Option B (Incorrect):Completeness checks ensure that all required data is entered but do not validate data accuracy.
* Option C (Incorrect):Sequence checks verify that records follow a logical sequence but do not catch errors within individual data entries.
* Option D (Correct):Acheck digitis an additional number generated through an algorithm (e.g., Luhn algorithm for credit cards) that helps detect errors such as transpositions (e.g., swapping digits 45 # 54) and transcriptions (e.g., mistyping 8 as 3).
Reference:ISACA CISA Review Manual -Domain 3: Information Systems Acquisition, Development, and Implementation- Covers input validation and error detection techniques.

The greatest concern when reviewing an IT strategic plan is B. The plan does not support relevant organizational goals. This is because an IT strategic plan should align and integrate the IT goals and objectives with the organization's overall strategy and vision, and ensure that IT supports and enables the business processes and functions1. If the IT strategic plan does not support relevant organizational goals, it may lead to:
Suboptimal or negative outcomes and value for the organization, as IT investments and initiatives may not align with the organization's priorities, needs, or expectations1.
Conflicts or inconsistencies between IT and business functions, as IT may not deliver the expected level of service, quality, or performance2.
Wasted or inefficient use of resources, as IT may spend time, money, or effort on projects or activities that are not relevant or beneficial for the organization2.

Admin accounts typically have the highest level of privileges and access to sensitive data. If the passwords for these accounts are not set to expire, it increases the risk of unauthorized access and potential security breaches. This is especially true if an admin's credentials are compromised, as the attacker could have ongoing access to critical systems and data1.
References:
Database Auditing - Satori