MENU
An auditee has responded to all requests for corrective action in a timely manner. Which of the following is the next step for the auditor?
Suggested Answer: B
Get Premium CQA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
VI
Vilma
11 months ago
D is interesting, but it feels a bit overkill for routine items.
DE
Desmond
11 months ago
Totally with you, Ira! B is the way to go.
HU
Hubert
11 months ago
Wait, can we really close findings just like that? Seems too easy.
SH
Shonda
11 months ago
I think A makes sense if the evidence is solid.
IR
Ira
11 months ago
Definitely B, gotta evaluate those responses first!
LU
Luann
12 months ago
I think we might need to evaluate the responses first, but I also recall something about closing findings if the evidence is adequate. It’s a bit confusing!
RO
Rodolfo
12 months ago
I feel like scheduling a follow-up audit is important, especially for critical items. But I’m not entirely sure if that’s the immediate next step.
FL
Fletcher
12 months ago
I remember a practice question where we had to decide if we should close findings or schedule follow-ups. I’m not sure if we should close them right away without further evaluation.
TW
Twana
1 year ago
I think the auditor should first evaluate the adequacy of the responses before closing any findings. That seems to be a crucial step.
PE
Pearly
1 year ago
This seems like a straightforward question about mitigating scope creep. I'd focus on the key controls mentioned, like project change management and configuration management.
JO
Johana
1 year ago
Okay, let me think this through step-by-step. COBIT and ISO 31000:2009 are definitely risk management frameworks, and NIST SP 800-37 is also a well-known one. That leaves Hex GBL as the odd one out. I'm going to go with that as my answer.