IS audits should be selected through a risk analysis process to concentrate on:
IS audits should be selected through a risk analysis process to concentrate on:
Your final audit report should be issued:
Your final audit report should be issued:
Well-written risk assessment guidelines for IS auditing should specify which of the following elements at the
Well-written risk assessment guidelines for IS auditing should specify which of the following
elements at the least (choose all that apply):
The ability of the internal IS audit function to achieve desired objectives depends largely on:
The ability of the internal IS audit function to achieve desired objectives depends largely on:
In-house personnel performing IS audits should posses which of the following knowledge and/or skills (choose 2
In-house personnel performing IS audits should posses which of the following knowledge and/or
skills (choose 2):
what involvement the internal audit team should have?
A comprehensive IS audit policy should include guidelines detailing what involvement the internal
audit team should have?
For application acquisitions with significant impacts, participation of your IS audit team should be encourage
For application acquisitions with significant impacts, participation of your IS audit team should be
encouraged:
Which of the following should be seen as one of the most significant factors considered when determining the f
Which of the following should be seen as one of the most significant factors considered when
determining the frequency of IS audits within your organization?
which of the following benefits?
Properly planned risk-based audit programs are often capable of offering which of the following
benefits?
which of the following factors?
The sophistication and formality of IS audit programs may vary significantly depending on which of
the following factors?