The decisions and actions of an IS auditor are MOST likely to affect which of the following risks?

Overall business risk for a particular threat can be expressed as:

Which of the following is a substantive test?

Which of the following is a benefit of a risk-based approach to audit planning? Audit:

An audit charter should:

The MAJOR advantage of the risk assessment approach over the baseline approach to

information security management is that it ensures:

Which of the following sampling methods is MOST useful when testing for compliance?

Which of the following is the MOST likely reason why e-mail systems have become a useful
source of evidence for litigation?

An IS auditor is assigned to perform a postimplementation review of an application system. Which
of the following situations may have impaired the independence of the IS auditor? The IS auditor:

The PRIMARY advantage of a continuous audit approach is that it: