Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?

• A.Mandatory holidays
• B.Transaction log review
• C.User awareness training
• D.Background checks

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides IS audit professionals with the BEST source of direction for performing audit functions?

• A.information security policy
• B.Audit charter
• C.IT steering committee
• D.Audit best practices

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide an IS auditor with the GREATEST assurance that data disposal controls support business strategic objectives?

• A.Media shredding policy
• B.Media labeling policy
• C.Media sanitization policy
• D.Media recycling policy

Comment: *

Name: *

Email: *

Verification: *

An IS auditor has been asked to advise on measures to improve IT governance within the organization. Which at the following is the BEST recommendation?

• A.Implement annual third-party audits.
• B.Require executive management to draft IT strategy
• C.Benchmark organizational performance against industry peers.
• D.Implement key performance indicators (KPIs)

Comment: *

Name: *

Email: *

Verification: *

An incident response team has been notified of a virus outbreak in a network subnet. Which of the following should be the NEXT step?

• A.Verify that the compromised systems are fully functional
• B.Focus on limiting the damage
• C.Remove and restore the affected systems
• D.Document the incident

Comment: *

Name: *

Email: *

Verification: *