MENU
An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board Which of the following is MOST important to provide to the consultant before the audit begins?
Suggested Answer: B
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
LA
Lavina
11 months ago
Not sure if the audit risks are that important at the start.
AL
Allene
12 months ago
Agree, understanding the scope is essential for a successful audit.
LO
Loreen
12 months ago
Surprised this isn't a no-brainer—organizational structure is key too!
OL
Ollie
12 months ago
I think the policies and framework are more crucial.
NI
Nicolette
1 year ago
Definitely need the scope and stakeholders first!
LI
Lili
1 year ago
Acceptance of audit risks seems relevant, but I wonder if that should come after the consultant understands the scope and stakeholders.
KA
Kattie
1 year ago
I feel like the policies and framework used by the security office could be really important too, but I guess it depends on what the audit is focusing on.
JA
Jamal
1 year ago
I remember a similar question where understanding the organizational structure was emphasized. It might help the consultant know who to talk to.
LO
Loreta
1 year ago
I think the scope and stakeholders of the audit are crucial, but I'm not entirely sure if that's the most important thing to provide first.
CA
Candra
1 year ago
I've got this! The SIP domain needs to be set in the signaling-group and ip-network-region forms. Those are the two key places to configure the SIP domain in the Avaya Aura CM.
CA
Catalina
1 year ago
This seems straightforward enough. I'll review the options and select the one that matches the default value described in the question.
CA
Casie
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to carefully review each option and think through the Java syntax rules for float and double declarations.
MI
Mira
1 year ago
Okay, I think I understand the question. The key is to identify the old and new paradigms mentioned in the internal audit report description.
HU
Huey
1 year ago
I feel like this question is similar to one we did on redundancy protocols, but I can't quite remember if ICMP was involved in the conditions for heartbeats.