During an exit interview, senior management disagrees with some of me facts presented m the draft audit report and wants them removed from the report. Which of the following would be the auditor's BEST course of action?

• A.Finalize the draft audit report without changes.
• B.Gather evidence to analyze senior management's objections
• C.Revise the assessment based on senior management's objections.
• D.Escalate the issue to audit management.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MAIN purpose of an information security management system?

• A.To identify and eliminate the root causes of information security incidents
• B.To enhance the impact of reports used to monitor information security incidents
• C.To reduce the frequency and impact of information security incidents
• D.To keep information security policies and procedures up-to-date

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST critical for the effective implementation of IT governance?

• A.Internal auditor commitment
• B.Documented policies
• C.Strong risk management practices
• D.Supportive corporate culture

Comment: *

Name: *

Email: *

Verification: *

What should an IS auditor do FIRST when a follow-up audit reveals some management action plans have not been initiated?

• A.Confirm whether the identified risks are still valid.
• B.Provide a report to the audit committee.
• C.Escalate the lack of plan completion to executive management.
• D.Request an additional action plan review to confirm the findings.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA> to automate routine business tasks?

• A.A request for proposal (RFP) has been issued to qualified vendors.
• B.The end-to-end process is understood and documented.
• C.A benchmarking exercise of industry peers who use RPA has been completed.
• D.Roles and responsibilities are defined for the business processes in scope.

Comment: *

Name: *

Email: *

Verification: *