Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Isaca Discussions

Exam CISA topic 1 question 569 discussion

Actual exam question from Isaca's CISA

Question #: 569
Topic #: 1

[All CISA Questions]

An IS auditor discovers a box of hard drives in a secured location that are overdue for physical destruction. The vendor responsible for this task was never made aware of these hard drives. Which of the following is the BEST course of action to address this issue?

A. Evaluate the corporate asset handling policy for potential gaps.
B. Examine the workflow to identify gaps in asset handling responsibilities.
C. Recommend the drives be sent to the vendor for destruction.
D. Escalate the finding to the asset owner for remediation.

Show Suggested Answer

Suggested Answer: B 🗳️

by Changwha at July 26, 2023, 11:57 a.m.

Comments

Submit Cancel

Infysenthil

1 day, 23 hours ago

I believe B is correct. Before making any recommendation, the IS auditor should gain a good understanding of the scope of the problem and what factors caused this incident. The IS auditor should identify whether the issue was caused by managers not following procedures, or by a problem with the workflow of the automated system or a combination of the two.

upvoted 1 times

Swallows

1 day, 1 hour ago

I agree with you. I change my selection.

upvoted 1 times

...

Swallows

4 weeks ago

Selected Answer: D

While evaluating the corporate asset handling policy for potential gaps (option A) is also important, escalating the finding to the asset owner for remediation ensures swift and direct action to address the immediate issue while also facilitating improvements to prevent recurrence.

upvoted 1 times

...