CISA IT Audit Standards and Frameworks 2

Question 1

In COBIT 2019, which governance domain is responsible for evaluating stakeholder needs and setting strategic direction for IT?

Accepted Answer

EDM — Evaluate, Direct and Monitor

Answer

The EDM (Evaluate, Direct and Monitor) domain is the sole governance domain in COBIT 2019 and is responsible for evaluating options, directing management, and monitoring performance.

Question 2

ISO 27002 serves which purpose in relation to ISO 27001?

Accepted Answer

It provides a code of practice with guidance on information security controls

Answer

ISO 27002 is a companion standard to ISO 27001 that provides guidance and best practices for selecting and implementing information security controls.

Question 3

Under ISACA's IS audit standards, an IS auditor's independence is described in which two forms?

Accepted Answer

Organizational independence and professional independence

Answer

ISACA standards require IS auditors to maintain both organizational independence (reporting structure free from conflicts) and professional independence (objective mindset).

Question 4

The NIST Cybersecurity Framework (CSF) is built around which five core functions?

Accepted Answer

Identify, Protect, Detect, Respond, Recover

Answer

The NIST CSF organizes cybersecurity activities into five concurrent and continuous functions: Identify, Protect, Detect, Respond, and Recover.

Question 5

In COBIT 2019, capability levels range from 0 to 5. What does a capability level of 0 indicate?

Accepted Answer

The process does not exist or fails to achieve its purpose

Answer

A capability level of 0 (Incomplete) indicates the process is either not implemented or fails to achieve its intended purpose.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA IT Audit Standards and Frameworks 2