QUESTION: 129 Exam Topic: 2, Information Security Controls and Audit Management

A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding.
Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

The auditors have not followed proper auditing processes
The CIO of the organization disagrees with the finding
The risk tolerance of the organization permits this risk
The organization has purchased cyber insurance

Answer(s): C

Reveal Solution Next Question

QUESTION: 130 Exam Topic: 2, Information Security Controls and Audit Management

The remediation of a specific audit finding is deemed too expensive and will not be implemented.
Which of the following is a TRUE statement?

The asset is more expensive than the remediation
The audit finding is incorrect
The asset being protected is less valuable than the remediation costs
The remediation costs are irrelevant; it must be implemented regardless of cost.

Answer(s): C

Reveal Solution Next Question