What is the difference between CISA and CISM?

A. The application owner was unaware of several changes applied to the application by the IT Department

Choice A is the most significant finding as it directly affects the integrity of the applications data and is evidence of an inadequate change control process and incorrect access rights to the processing environment. Although backing up the application data only once a week is a finding, it does not affect the integrity of the data in the system. Incomplete application development documentation does not affect integrity of the data. The lack of appropriate fire detection systems does not affect the integrity of the data but may affect the storage of the data.