An example of a direct benefit to be derived from a proposed IT-related business investment is:
An example of a direct benefit to be derived from a proposed IT-related business investment is:
To assist an organization in planning for IT investments, an IS auditor should recommend the use of:
To assist an organization in planning for IT investments, an IS auditor should recommend the use
of:
A benefit of open system architecture is that it:
A benefit of open system architecture is that it:
In the context of effective information security governance, the primary objective of value delivery is to:
In the context of effective information security governance, the primary objective of value delivery
is to:
Which of the following BEST supports the prioritization of new IT projects?
Which of the following BEST supports the prioritization of new IT projects?
Which of the following would be the GREATEST risk?
After the merger of two organizations, multiple self-developed legacy applications from both
companies are to be replaced by a new common platform. Which of the following would be the
GREATEST risk?
Which of the following is the MOST important function to be performed by IS management when a service has been
Which of the following is the MOST important function to be performed by IS management when a
service has been outsourced?
Is it appropriate for an IS auditor from a company that is considering outsourcing its IS processing to reques
Is it appropriate for an IS auditor from a company that is considering outsourcing its IS processing
to request and review a copy of each vendor’s business continuity plan?
An IS auditor reviewing an outsourcing contract of IT facilities would expect it to define the:
An IS auditor reviewing an outsourcing contract of IT facilities would expect it to define the:
which of the following conclusions should be the main concern of the IS auditor?
When performing a review of the structure of an electronic funds transfer (EFT) system, an IS
auditor observes that the technological infrastructure is based on a centralized processing scheme
that has been outsourced to a provider in another country. Based on this information, which of the
following conclusions should be the main concern of the IS auditor?