CISA IT Audit Standards and Frameworks 3

Question 1

In IS auditing, 'audit risk' is composed of which three components?

Accepted Answer

Inherent risk, control risk, and detection risk

Answer

Audit risk is the product of inherent risk (risk without controls), control risk (risk that controls fail), and detection risk (risk auditors miss a material issue).

Question 2

Within ISACA's framework, which component provides IS auditors with specific step-by-step procedures for conducting an audit?

Accepted Answer

Tools and Techniques

Answer

Tools and Techniques are practical resources that provide IS auditors with specific procedures, checklists, and methods to apply the Standards and Guidelines.

Question 3

According to the COSO framework, internal control is best described as:

Accepted Answer

A process effected by an entity's board, management, and other personnel

Answer

COSO defines internal control as a process effected by people at all levels of the organization — the board, management, and staff — not just a set of policies.

Question 4

The COBIT 2019 management domain APO primarily deals with which activities?

Accepted Answer

Aligning IT strategy with business goals, planning IT resources, and organizing IT functions

Answer

APO (Align, Plan and Organize) covers strategic alignment, IT resource planning, portfolio management, risk management, and organizational structures.

Question 5

ISACA's CRISC certification complements CISA by focusing on which specialized area?

Accepted Answer

IT risk identification and information systems control

Answer

CRISC (Certified in Risk and Information Systems Control) focuses on IT risk identification, assessment, response, and the design of IS controls — a natural complement to CISA.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA IT Audit Standards and Frameworks 3