Free CISA Exam braindumps download (CISA exam dumps Free)

QUESTION: 526

Which of the following observations noted during a review of the organization's social media practices should be of MOST concern to the IS auditor?

Not all employees using social media have attended the security awareness program.
The organization does not require approval for social media posts.
The organization does not have a documented social media policy.
More than one employee is authorized to publish on social media on behalf of the organization.

Answer(s): C

Show Answer Next Question

QUESTION: 527

Which of the following is the BEST way for an IS auditor to determine how well an information security program has been implemented throughout the organization?

Evaluate the percentage of employees who have taken security awareness training.
Review security awareness training content for completeness.
Perform security risk assessments for the organization's business units.
Evaluate the integration of security best practices into business workflow.

Answer(s): D

Show Answer Next Question

QUESTION: 528

Which of the following is the MOST important feature of access control software?

Identification
Authentication
Violation reporting
Nonrepudiation

Answer(s): B

Show Answer Next Question

QUESTION: 529

Which of the following is the GREATEST concern associated with control self-assessments (CSAs)?

Employees may have insufficient awareness of controls.
The assessment may not provide sufficient assurance to stakeholders.
Controls may not be assessed objectively.
Communication between operational management and senior management may not be effective.

Answer(s): C

Show Answer Next Question