An IS auditor has been asked to review an event log aggregation system to ensure risk management practices have been applied. Which of the following should be of MOST concern to the auditor?

• A.Log feeds are uploaded via batch process.
• B.Completeness testing has not been performed on the log data.
• C.The log data is not normalized.
• D.Data encryption standards have not been considered.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indicator for measuring performance of the IT help desk function?

• A.Number of reopened tickets
• B.Number of incidents reported
• C.Percentage of problems raised from incidents
• D.Mean time to categorize tickets

Comment: *

Name: *

Email: *

Verification: *

Management has agreed to perform multiple remediation actions in response to an audit issue, including the implementation of a new control. Which of the following is the BEST time for an IS auditor to perform an audit follow-up of this issue?

• A.After management has completed the required actions
• B.When audit resources are available
• C.When management resources are available
• D.After the new control has been in place for one year

Comment: *

Name: *

Email: *

Verification: *

During the testing of the business continuity plan (BCP), which of the following methods of results analysis provides the BEST assurance that the plan is workable?

• A.Measurement of accuracy
• B.Elapsed time for completion of critical tasks
• C.Quantitatively measuring the results of the test
• D.Evaluation of the observed test results

Comment: *

Name: *

Email: *

Verification: *

To optimize an organization's business contingency plan (BCP), an IS auditor should
recommend conducting a business impact analysis (BlA) in order to determine:

• A.the business processes that generate the most financial value for the organization and therefore must be recovered first.
• B.the priorities and order for recovery to ensure alignment with the organization's business strategy.
• C.the business processes that must be recovered following a disaster to ensure the organization's survival.
• D.the priorities and order of recovery which will recover the greatest number of systems in the shortest time frame.

Comment: *

Name: *

Email: *

Verification: *