Computer Systems & Software Updates Flashcards
7 cards from real CHA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Computer Systems & Software Updates flashcards as text
A HACCP auditor finds that three former employees still have active login credentials to the CCP monitoring system. This is BEST classified as a nonconformance against:
Answer: Access control and user management requirements
Inactive personnel retaining system access violates access control requirements, compromising data integrity and accountability in electronic HACCP records.
What is the recommended frequency for backing up electronic HACCP monitoring data to ensure business continuity?
Answer: Regularly and according to a documented backup procedure that matches the criticality of the data
Backup frequency must be defined in a documented procedure and aligned with the criticality of the HACCP data to ensure no critical CCP records are lost.
Which access control principle is MOST important when assigning roles in a HACCP electronic monitoring system?
Answer: Users should be granted only the minimum access needed to perform their job function
The principle of least privilege limits each user to the minimum access required, reducing the risk of unauthorized data modification in HACCP records.
When a HACCP facility migrates data from a legacy monitoring system to a new platform, what must be verified before decommissioning the old system?
Answer: That all historical HACCP records transferred accurately and completely with no data loss
Data migration must include verification that all records transferred with full accuracy and completeness, as HACCP records must be retained and accessible for regulatory purposes.
A facility's disaster recovery plan specifies restoring HACCP monitoring systems within 4 hours of a system failure. During an audit, the actual tested recovery time was 9 hours. This finding indicates:
Answer: A gap between the documented recovery objective and actual system performance requiring corrective action
A tested recovery time that exceeds the documented recovery time objective (RTO) represents a system performance gap requiring formal corrective action and plan revision.
In a validated HACCP computer system, who is responsible for authorizing access-level changes for users?
Answer: A designated system administrator following a documented access management procedure
Access changes in regulated systems must go through a designated administrator following documented procedures to maintain accountability and audit trail integrity.
What is a 'system downtime procedure' in the context of HACCP electronic monitoring, and why is it required?
Answer: A documented process for maintaining manual HACCP monitoring when the computer system is unavailable
A system downtime procedure ensures CCP monitoring continues uninterrupted using manual methods when the electronic system is unavailable, preventing food safety gaps.