CCISO Audit Management 3

Question 1

A CISO wants to ensure audit recommendations are implemented on schedule. Which mechanism is most effective?

Accepted Answer

Establishing a formal tracking system with defined owners, due dates, and periodic status reviews

Answer

A formal tracking system with assigned owners, deadlines, and status reviews ensures systematic, accountable remediation of audit findings.

Question 2

Under the ISACA IT Audit framework, which term describes the root cause of a control deficiency?

Accepted Answer

Cause

Answer

In audit finding structure, 'cause' identifies why the control deficiency exists, helping management address the underlying problem rather than just the symptom.

Question 3

Which type of audit opinion is issued when auditors cannot obtain sufficient appropriate evidence to form a conclusion?

Accepted Answer

Disclaimer of opinion

Answer

A disclaimer of opinion is issued when the auditor is unable to obtain sufficient evidence, making it impossible to express any audit opinion.

Question 4

Which international standard provides the primary framework for internal audit activity globally?

Accepted Answer

IIA International Standards for the Professional Practice of Internal Auditing

Answer

The IIA's International Standards for the Professional Practice of Internal Auditing is the globally accepted framework governing internal audit quality and independence.

Question 5

A CISO is designing an audit universe. Which factor should have the greatest influence on audit prioritization?

Accepted Answer

The risk level and potential impact associated with each auditable entity

Answer

Audit prioritization should be driven by risk level and potential business impact so that limited audit resources address the most significant exposures.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Audit Management 3