Isaca Certified Information Systems Auditor CISA Question # 395 Topic 40 Discussion
CISA Exam Topic 40 Question 395 Discussion:
Question #: 395
Topic #: 40
An organization has developed mature risk management practices that are followed across all departments What is the MOST effective way for the audit team to leverage this risk management maturity?
A.
Implementing risk responses on management ' s behalf
B.
Integrating the risk register for audit planning purposes
C.
Providing assurances to management regarding risk
D.
Facilitating audit risk identification and evaluation workshops
The most effective way for the audit team to leverage the risk management maturity of the organization is to integrate the risk register for audit planning purposes. The risk register is a document that records the identified risks, their likelihood, impact, and mitigation strategies for a project or an organization. By using the risk register, the audit team can align their audit objectives, scope, and procedures with the organization’s risk profile and priorities. This will help the audit team to provide more value-added and relevant assurance and recommendations to the management and stakeholders.
Some of the web sources that support this answer are:
Audit Maturity And Risk Management | Ideagen
Building a Mature Enterprise Risk Management Plan | AuditBoard
CISA CertifiedInformation Systems Auditor – Question0551
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit