Question 531 · 1459 in bank
When establishing new integrations with a vendor, which of the following is an IS auditor's BEST recommendation to management concerning data security?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
When establishing new integrations with a vendor, which of the following is an IS auditor's BEST recommendation to management concerning data security?
Answer: A
Which of the following is the BEST approach to minimize the risk of devices being unavailable following a required firmware upgrade?
Answer: A
Which of the following is the GREATEST indication of scope creep in the management of a software development project?
Answer: B
Which of the following is MOST helpful to a project manager in mitigating risk associated with frequent changes in project requirements?
Answer: D
Which of the following should be of GREATEST concern to an IS auditor assessing the effectiveness of an organization's information security governance?
Answer: A
A. Risk assessments of information assets are not periodically performed. This option is of utmost concern because regular risk assessments are fundamental to identifying, evaluating, and mitigating risks associated with information assets. Without periodic risk assessments, the organization may remain unaware of potential vulnerabilities and threats, leading to inadequate protection of sensitive information and increased exposure to security incidents. While both the lack of periodic risk assessments and the absence of executive review of the information security policy are serious concerns, the priority can depend on the specific context and maturity of the organization's governance. However, your emphasis on the necessity of risk assessments highlights a critical aspect of effective information security governance. Both factors should be taken seriously to ensure comprehensive security management.
Source: Adapted from community discussion — PurpleParrot
Which of the following is the MOST important outcome of the data classification process?
Answer: D
Which of the following provides the BEST assurance that an organization's internal IT projects will consistently deliver the expected return on investment (ROI)?
Answer: B
The PRIMARY reason for an IS auditor to use data analytics techniques is to reduce which type of audit risk?
Answer: C
Of the following, who is accountable for ensuring the representation of major stakeholders involved in a project?
Answer: B
IS audit management reviewed the audit work done for a system implementation and determined that the weaknesses responsible for a major issue were not in the audit scope. Which type of audit risk was MOST likely overlooked when planning the audit?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 531. 1459 questions available.
Version 1.0.0. How we source questions