An IS auditor evaluating the change management process must select a sample from the change log. What is the BEST way tor the auditor to confirm the change log is complete?

• A.Interview change management personnel about completeness.
• B.Take an item from the log and trace it back to the system.
• C.Obtain management attestation of completeness.
• D.Take the last change from the system and trace it back to the log.

Comment: *

Name: *

Email: *

Verification: *

Which of the following activities would allow an IS auditor to maintain independence while facilitating a control sell-assessment (CSA)?

• A.Partially completing the CSA
• B.Developing the remediation plan
• C.Implementing the remediation plan
• D.Developing the CSA questionnaire

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an IS auditor recommend as a PRIMARY area of focus when an organization decides to outsource technical support for its external customers?

• A.Align service level agreements (SLAs) with current needs.
• B.Monitor customer satisfaction with the change.
• C.Minimize costs related to the third-party agreement.
• D.Ensure right to audit is included within the contract.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the BEST criteria for monitoring an IT vendor's service levels?

• A.Surprise visit to vendor
• B.Interview with vendor
• C.Service auditor's report
• D.Performance metrics

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?

• A.Background checks
• B.User awareness training
• C.Transaction log review
• D.Mandatory holidays

Comment: *

Name: *

Email: *

Verification: *