Free CISA Exam braindumps download (CISA exam dumps Free)

QUESTION: 371

Which of the following should be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

Security policies are not applicable across all business units.
End users are not required to acknowledge security policy training.
The security policy has not been reviewed within the past year.
Security policy documents are available on a public domain website.

Answer(s): A

Show Answer Next Question

QUESTION: 372

Which of the following should be the PRIMARY basis for prioritizing follow-up audits?

Audit cycle defined in the audit plan
Recommendation from executive management
Residual risk from the findings of previous audits
Complexity of management's action plans

Answer(s): C

Show Answer Next Question

QUESTION: 373

Which of the following should be an IS auditor's GREATEST consideration when scheduling follow-up activities for agreed-upon management responses to remediate audit observations?

IT budgeting constraints
Availability of responsible IT personnel
Risk rating of original findings
Business interruption due to remediation

Answer(s): C

Show Answer Next Question

QUESTION: 374

Which of the following is the MOST useful information for an IS auditor to review when formulating an audit plan for the organization's outsourced service provider?