Which of the following should be seen as one of the most significant factors considered when determining the
frequency of IS audits within your organization?

For application acquisitions with significant impacts, participation of your IS audit team should be encouraged:A. early in the due diligence stage.

A comprehensive IS audit policy should include guidelines detailing what involvement the internal audit team
should have?

In-house personnel performing IS audits should posses which of the following knowledge and/or skills (choose
2):

The ability of the internal IS audit function to achieve desired objectives depends largely on:

Well-written risk assessment guidelines for IS auditing should specify which of the following elements at the
least (choose all that apply):

Your final audit report should be issued:

IS audits should be selected through a risk analysis process to concentrate on:

What should be done to determine the appropriate level of audit coverage for an organization’s IT environment?

Which of the following correctly describes the purpose of an Electronic data processing audit?