Which of the following actions should the IS auditor take?
An IS auditor conducting a review of software usage and licensing discovers that numerous PCs
contain unauthorized software. Which of the following actions should the IS auditor take?
The auditor should:
Corrective action has been taken by an auditee immediately after the identification of a reportable
finding. The auditor should:
While preparing the audit report, the IS auditor should:
During an implementation review of a multiuser distributed application, an IS auditor finds minor
weaknesses in three areas-the initial setting of parameters is improperly installed, weak passwords
are being used and some vital reports are not beingchecked properly. While preparing the audit
report, the IS auditor should:
During an exit interview, in cases where there is disagreement regarding the impact of a finding, an IS audito
During an exit interview, in cases where there is disagreement regarding the impact of a finding, an
IS auditor should:
When preparing an audit report the IS auditor should ensure that the results are supported by:
When preparing an audit report the IS auditor should ensure that the results are supported by:
The final decision to include a material finding in an audit report should be made by the:
The final decision to include a material finding in an audit report should be made by the:
A PRIMARY benefit derived from an organization employing control self-assessment (CSA) techniques is that it:
A PRIMARY benefit derived from an organization employing control self-assessment (CSA)
techniques is that it:
The success of control self-assessment (CSA) highly depends on:
The success of control self-assessment (CSA) highly depends on:
Which of the following is an attribute of the control self-assessment (CSA) approach?
Which of the following is an attribute of the control self-assessment (CSA) approach?
Which of the following is the key benefit of control self-assessment (CSA)?
Which of the following is the key benefit of control self-assessment (CSA)?