An IS auditor finds that firewalls are outdated and not supported by vendors. Which of the following should be the auditor's NEXT course of action?

• A.Report the security posture of the organization.
• B.Report the mitigating controls.
• C.Determine the value of the firewall.
• D.Determine the risk of not replacing the firewall.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST justification for deferring remediation testing until the next audit?

• A.Management's planned actions are sufficient given the relative importance of the observations.
• B.The auditor who conducted the audit and agreed with the timeline has left the organization.
• C.The audit environment has changed significantly.
• D.Auditee management has accepted all observations reported by the auditor.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY role of a control self-assessment (CSA) facilitator is to:

• A.provide solutions for control weaknesses.
• B.focus the team on internal controls.
• C.report on the internal control weaknesses.
• D.conduct interviews to gain background information.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor requests direct access to data required to perform audit procedures instead of asking management to provide the data Which of the following is the PRIMARY advantage of this approach?

• A.Audit transparency
• B.Audit efficiency
• C.Data confidentiality
• D.Professionalism

Comment: *

Name: *

Email: *

Verification: *

Which of the following is me GREATE ST impact as a result of the ongoing deterioration of a detective control?

• A.Increased demand for storage space for logs
• B.Decreased effectiveness of roof cause analysis
• C.Decreased overall recovery time
• D.Increased number of false negatives in security logs

Comment: *

Name: *

Email: *

Verification: *