QUESTION: 309

When reviewing past results of a recurring annual audit, an IS auditor notes that findings may not have been reported and independence may not have been maintained. Which of the following IS the auditor's BEST course of action?

Reevaluate internal controls
Re-perform past audits to ensure independence
Inform senior management
Inform audit management

Answer(s): D

Show Answer Next Question

QUESTION: 310

An information systems security officer's PRIMARY responsibility for business process applications is to:

create role-based rules for each business process.
approve the organization's security policy.
ensure access rules agree with policies.
authorize secured emergency access.

Answer(s): C

Show Answer Next Question

QUESTION: 311

Coding standards provide which of the following?

Access control tables
Data flow diagrams
Field naming conventions
Program documentation

Answer(s): C

Show Answer Next Question

QUESTION: 312

During which IT project phase is it MOST appropriate to conduct a benefits realization analysis?

Post-implementation review phase
Design review phase
User acceptance testing (UAT) phase
Final implementation phase

Answer(s): A

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 79)

QUESTION: 309

QUESTION: 310

QUESTION: 311

QUESTION: 312

CISA Exam Discussions & Posts