Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Isaca Discussions

Exam CISA topic 1 question 430 discussion

Actual exam question from Isaca's CISA

Question #: 430
Topic #: 1

[All CISA Questions]

Which of the following should be of GREATEST concern to an IS auditor performing a review of information security controls?

A. The information security policy does not include mobile device provisions.
B. The information security policy is not frequently reviewed.
C. The information security policy has not been approved by the chief audit executive (CAE).
D. The information security policy has not been approved by the policy owner.

Show Suggested Answer

Suggested Answer: D 🗳️

by Eric0223 at Jan. 28, 2023, 3:13 a.m.

Comments

Submit Cancel

Swallows

22 hours, 35 minutes ago

Selected Answer: D

While the frequency of reviewing the information security policy (option B) is important for ensuring its relevance and alignment with evolving threats and organizational changes, it is secondary to the fundamental issue of having the policy approved by the appropriate authority (option D).

upvoted 1 times

...

a84n

2 months, 1 week ago

Selected Answer: D

Answer D it's important for the IS auditor to ensure that the information security policy has been approved by the appropriate senior management authority, whoever that may be in the organization.

upvoted 1 times

...