Discuss Isaca CISA Exam Topic 1 Question 45

An organization that has suffered a cyber attack is performing a forensic analysis of the affected users' computers Which of the following should be of GREATEST concern for the IS editor reviewing this process?

AAudit was only involved during extraction of the information.

BThe legal department has not been engaged.

CThe chain of custody has not been documented

DAn imaging process was used to obtain a copy of the data from each computer.

Suggested Answer: C

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

An 11 months ago

Agree, the legal team needs to be involved from the start!

Cristal 12 months ago

An imaging process is standard, so not worried about that part.

Almeta 12 months ago

Surprised that they didn't document the chain of custody! How can they prove anything?

Salina 12 months ago

I think the legal department should be a top priority too.

Alaine 1 year ago

Definitely the chain of custody! That's crucial.

Ligia 1 year ago

I thought the imaging process was supposed to be standard practice, so I’m not sure why that would be a concern. Maybe it’s more about how the evidence is handled after?

Myrtie 1 year ago

I feel like we practiced a question similar to this where the chain of custody was a major point of concern. It seems like it would be the top priority here as well.

Ashanti 1 year ago

I’m not entirely sure, but I think engaging the legal department is crucial too. Without them, there might be issues with how the evidence is handled later on.

Felix 1 year ago

I remember discussing the importance of chain of custody in our last class. If that's not documented, it could really undermine the whole forensic process.

Cristal 1 year ago

Hmm, this looks like a tricky one. I'll need to think carefully about the different types of mail activities and their outputs.

Rosina 1 year ago

I remember we talked about the auditor's responsibilities in class, but I'm a bit unsure if determining the implementation of controls is necessary.

Erick 1 year ago

For some reason, I'm confused about how supplemental benefits work. I feel like they might not be included, but I really can't recall the guidelines clearly.

Dexter 1 year ago

Okay, let me see. I think the multiple VIC support was introduced in 3.5.1, not the original 3.5 release. I'll double-check the details, but that's my best guess for now.

Anisha 1 year ago

I think option B sounds right, but I'm not entirely sure if just disclosing my interest is enough to avoid any ethical concerns.

Graham 1 year ago

Okay, let me think this through step-by-step. Leker exchanged a van with a $20,000 basis for a new van worth $10,000 and $3,000 in cash. The key is figuring out the basis of the new van.

Isaca CISA Exam - Topic 1 Question 45 Discussion