QUESTION: 209

When implementing a new IT maturity model, which of the following should occur FIRST?

Determine the model elements to be evaluated.
Benchmark with industry peers.
Define the target IT maturity level.
Develop performance metrics.

Answer(s): A

QUESTION: 210

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

an information security framework.
past information security incidents.
a risk management process.
industry best practices.

Answer(s): C

Show Answer Next Question

An organization that has suffered a cyberattack is performing a forensic analysis of the affected users' computers. Which of the following should be of GREATEST concern for the IS auditor reviewing this process?

The chain of custody has not been documented.
An imaging process was used to obtain a copy of the data from each computer.
Audit was only involved during extraction of the information.
The legal department has not been engaged.

Answer(s): A

Show Answer Next Question

QUESTION: 212

The members of an emergency incident response team should be:

assigned at the time of each incident.
appointed by the CISO.
restricted to IT personnel.
selected from multiple departments.

Answer(s): D

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 54)

QUESTION: 209

QUESTION: 210

QUESTION: 211

QUESTION: 212

CISA Exam Discussions & Posts