Free HCISPP Exam Braindumps (page: 19)

Page 18 of 77

An organization is outsourcing its payroll system and is requesting to conduct a full audit on the third- party information technology (IT) systems. During the due diligence process, the third party provides previous audit report on its IT system.
Which of the following MUST be considered by the organization in order for the audit reports to be acceptable?

  1. The audit assessment has been conducted by an independent assessor.
  2. The audit reports have been signed by the third-party senior management.
  3. The audit reports have been issued in the last six months.
  4. The audit assessment has been conducted by an international audit firm.

Answer(s): B



Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider’s customers?

  1. Security
  2. Privacy
  3. Access
  4. Availability

Answer(s): C


Reference:

https://www.aicpa.org/content/dam/aicpa/interestareas/frc/assuranceadvisoryservices/downloada bledocuments/trust-services-criteria.pdf



A risk assessment report recommends upgrading all perimeter firewalls mitigate particular finding. Which of the following BEST supports this recommendation?

  1. The inherent risk is greater than the residual risk.
  2. The Annualized Loss Expectancy (ALE) approaches zero.
  3. The expected loss from the risk exceeds mitigation costs.
  4. The infrastructure budget can easily cover the upgrade costs.

Answer(s): C



The primary objectives of a healthcare system include all of the following except:

  1. Enabling all citizens to receive healthcare services
  2. Delivering healthcare services that are cost-effective
  3. Delivering healthcare services using the most current technology, regardless of cost
  4. Delivering healthcare services that meet established standards of quality

Answer(s): C






Post your Comments and Discuss ISC2 HCISPP exam with other Community members:

HCISPP Discussions & Posts