Upon completion of audit work, an IS auditor should:

• A.review the working papers with the auditee.
• B.provide a report to the auditee stating the initial findings.
• C.provide a report to senior management prior to discussion with the auditee.
• D.distribute a summary of general findings to the members of the auditing team.

Comment: *

Name: *

Email: *

Verification: *

During an exit interview, senior management disagrees with some of me facts presented m the draft audit report and wants them removed from the report. Which of the following would be the auditor's BEST course of action?

• A.Gather evidence to analyze senior management's objections
• B.Revise the assessment based on senior management's objections.
• C.Finalize the draft audit report without changes.
• D.Escalate the issue to audit management.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY reason for an IS auditor to use data analytics techniques is to reduce which type of audit risk?

• A.Detection risk
• B.Control risk
• C.Technology risk
• D.Inherent risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST efficient way to identify segregation of duties violations in a new system?

• A.Review a report of security rights in the system.
• B.Develop a process to identify authorization conflicts.
• C.Observe the performance of business processes.
• D.Examine recent system access rights violations.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern to an IS auditor when auditing an organization's IT strategy development process?

• A.The IT strategy was developed based on the current IT capability
• B.The IT strategy was developed before the business plan
• C.Information security was not included as a key objective m the IT strategic plan.
• D.A business impact analysis (BIA) was not performed to support the IT strategy

Comment: *

Name: *

Email: *

Verification: *