CCISO Audit Management 2

Question 1

Which audit sampling method selects items based on their monetary value, giving higher-value transactions a greater probability of selection?

Accepted Answer

Monetary unit sampling

Answer

Monetary unit sampling (MUS) gives each dollar an equal probability of selection, so higher-value items are more likely to be chosen.

Question 2

A CISO discovers that an internal audit team lacks independence because its manager reports to the CIO. What is the most appropriate corrective action?

Accepted Answer

Restructure so the internal audit function reports to the audit committee or board

Answer

True independence requires the internal audit function to report to the audit committee or board, not to operational management.

Question 3

During a closing meeting, the auditee disputes a finding. What is the auditor's best response?

Accepted Answer

Document the dispute and include management's response in the final report

Answer

Documenting the dispute and including management's rebuttal preserves objectivity and provides a complete record in the final report.

Question 4

Which document formally authorizes an audit engagement and defines its scope, objectives, and resources?

Accepted Answer

Engagement letter

Answer

The engagement letter (or audit plan) formally authorizes a specific audit, defining scope, objectives, timeline, and resource allocation.

Question 5

An audit reveals that compensating controls exist where a primary control has failed. How should the CISO treat residual risk in this scenario?

Accepted Answer

Evaluate whether the compensating controls sufficiently reduce residual risk to an acceptable level

Answer

Compensating controls must be evaluated to confirm they adequately reduce residual risk before accepting the current state.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Audit Management 2