The MAJOR advantage of the risk assessment approach over the baseline approach to information
security management is that it ensures:

An audit charter should:

Which of the following is a benefit of a risk-based approach to audit planning? Audit:

Which of the following is a substantive test?

Overall business risk for a particular threat can be expressed as:

The decisions and actions of an IS auditor are MOST likely to affect which of the following risks?

An IS auditor is reviewing access to an application to determine whether the 10 most recent “new
user” forms were correctly authorized. This is an example of:

An IS auditor is using a statistical sample to inventory the tape library. What type of test would this
be considered?

Database snapshots can provide an excellent audit trail for an IS auditor. True or false?

What is a data validation edit control that matches input data to an occurrence rate? Choose the
BEST answer.