The FINAL decision to include a material finding in a cloud audit report should be made by the:
The other options are not correct. Option A is incorrect, as the auditee's senior management is not in charge of the audit report, but rather the subject of the audit. The auditee's senior management should provide their perspective and action plans for the material findings, but they cannot decide whether to include or exclude them from the report. Option B is incorrect, as the organization's CEO is not involved in the audit process, but rather the ultimate recipient of the audit report. The organization's CEO should review and act upon the audit report, but they cannot influence the content of the report. Option D is incorrect, as the organization's CISO is not an independent party, but rather a stakeholder of the audit. The organization's CISO should support and collaborate with the cloud auditor, but they cannot make the final decision on the material findings.Reference:
ISACA Cloud Auditing Knowledge Certificate Study Guide, page 19-20.
Argelia
1 day agoAyesha
6 days agoYuki
11 days agoHana
17 days agoHyman
22 days agoMartina
27 days agoVerona
2 months agoRaymon
2 months agoKatina
2 months agoLilli
2 months agoMicah
2 months agoTamesha
2 months agoLatricia
3 months agoColetta
3 months agoJerlene
3 months agoJesusita
3 months agoVallie
3 months agoMari
3 months agoStefany
4 months agoFranklyn
4 months agoCordell
4 months agoMelita
4 months agoKrissy
4 months agoFausto
5 months agoEric
5 months ago