Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Isaca Certified Information Systems Auditor CISA Question # 371 Topic 38 Discussion

Isaca Certified Information Systems Auditor CISA Question # 371 Topic 38 Discussion

CISA Exam Topic 38 Question 371 Discussion:
Question #: 371
Topic #: 38

Following an IT audit, management has decided to accept the risk highlighted in the audit report. Which of the following would provide the MOST assurance to the IS auditor that management

is adequately balancing the needs of the business with the need to manage risk?


A.

A communication plan exists for informing parties impacted by the risk.


B.

Potential impact and likelihood are adequately documented.


C.

Identified risk is reported into the organization ' s risk committee.


D.

Established criteria exist for accepting and approving risk.


Get Premium CISA Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.