QUESTION: 89

Which of the following should be the FIRST step when developing a data loss prevention (DLP) solution for a large organization?

Create the DLP policies and templates.
Conduct a threat analysis against sensitive data usage.
Conduct a data inventory and classification exercise.
Identify approved data workflows across the enterprise.

Answer(s): C

Reveal Solution Next Question

QUESTION: 90

Which of the following activities would allow an IS auditor to maintain independence while facilitating a control self-assessment (CSA)?

Implementing the remediation plan
Developing the remediation plan
Developing the CSA questionnaire
Partially completing the CSA

Answer(s): C

Reveal Solution Next Question

QUESTION: 91

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA) to automate routine business tasks?

A benchmarking exercise of industry peers who use RPA has been completed.
The end-to-end process is understood and documented.
A request for proposal (RFP) has been issued to qualified vendors.
Roles and responsibilities are defined for the business processes in scope.

Answer(s): B

Reveal Solution Next Question

QUESTION: 92

Which of the following BEST facilitates the legal process in the event of an incident?

Right to perform e-discovery
Preserving the chain of custody
Results of a root cause analysis
Advice from legal counsel

Answer(s): B

Reveal Solution Next Question

Free CISA Exam Braindumps (page: 24)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92

CISA Exam Discussions & Posts