1. Categories >> Certifications >> CISA Certification
  2. Suggest New Category

In the course of performing a risk analysis, an IS auditor
has identified threats and potential impacts. Next, an IS
auditor should:

A. identify and assess the risk assessment process used by
management.

B. identify information assets and the underlying systems.

C. disclose the threats and impacts to management.

D. identify and evaluate the existing controls.

Question Posted / guest

Answer Posted / guest

Answer: D

It is important for an IS auditor to identify and evaluate
the existing controls and security once the potential
threats and possible impacts are identified. Upon completion
of an audit an IS auditor should describe and discuss with
management the threats and potential impacts on the assets.

Is This Answer Correct ?    12 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2842

purchase orders issued to vendors have been authorized as per the authorization matrix

1093