An organization offers an online information security awareness program to employees on an annual basis.
Which of the following from an audit of the program should be the auditor's GREATEST concern?

• A.New employees are given three months to complete the training
• B.Training completions is not mandatory for staff.
• C.The post-training test content is two years old.
• D.Employees have complained about the length of the program

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a risk of cross-training?

• A.Increases the dependence on one employee
• B.Does not assist in succession planning
• C.One employee may know all parts of a system
• D.Does not help in achieving a continuity of operations

Comment: *

Name: *

Email: *

Verification: *

An IS auditor conducting audit follow-up activities learns that some previously agreed-upon corrective
actions have not been taken and that the associated risk has been accepted by senior management. If the
auditor disagrees with management's decision, what is the BEST way to address the situation?

• A.Repeat the audit with audit scope only covering areas with accepted risks
• B.Report the issue to the chief audit executive for resolution
• C.Recommend new corrective actions to mitigate the accepted risk
• D.Take no action since management's decision has been made

Comment: *

Name: *

Email: *

Verification: *

An IS auditor observes that the CEO has full access to the enterprise resource planning (ERP) system. The
IS auditor should FIRST:

• A.accept the level of access provided as appropriate
• B.recommend that the privilege be removed
• C.ignore the observation as not being material to the review
• D.document the finding as a potential risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an IS auditor expect to find when reviewing IT security policy?

• A.Assigned responsibility for safeguarding company assets
• B.A risk-based classification of systems
• C.An inventory of information assets
• D.Virus protection implementation strategies

Comment: *

Name: *

Email: *

Verification: *