Discuss Isaca CISA Exam Topic 1 Question 7

Assessments of critical information systems are based on a cyclical audit plan that has not been updated for several years. Which of the following should the IS auditor recommend to BEST address this situation?

AUpdate the audit plan quarterly to account for delays and deferrals of period* reviews

BUse a revolving set of audit plans to cover all systems

CDo not include periodic reviews in detail as part of the audit plan.

DRegularly validate the audit plan against business risks.

Suggested Answer: D

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Tomoko 11 months ago

I think quarterly updates are too frequent; maybe biannually?

Jacqueline 12 months ago

Wait, how can you not include periodic reviews? That seems off.

Nina 12 months ago

Regularly validating against business risks is key!

Cecily 12 months ago

I disagree, a revolving set of plans might be better.

Jenise 1 year ago

Updating the audit plan quarterly sounds smart!

Glennis 1 year ago

I recall that periodic reviews are crucial, so I don't think option C is a good recommendation at all. It seems risky to skip those details.

Daniel 1 year ago

I feel like we practiced a question similar to this, and I think revolving audit plans might be too complex. Maybe option B isn't the best?

Mabel 1 year ago

I'm not entirely sure, but I think updating the audit plan quarterly could help address delays. That sounds like option A, right?

Jess 1 year ago

I remember we discussed the importance of aligning the audit plan with current business risks, so I think option D might be the best choice.

Miles 1 year ago

I think this question is asking about the purpose of having a "definition of done" in an agile development process. The options seem to cover some of the key benefits, like creating shared understanding, guiding management's expectations, and helping with sprint planning.

Malika 1 year ago

Hmm, this looks like a straightforward question about the different statuses of a scheduled task in DataWorks. I'll need to think carefully about the possible statuses and select the 3 correct ones.

Marion 1 year ago

Enabling MFA for the admin portal is a best practice, so I'm going to go with that.

Erasmo 1 year ago

I remember practicing with questions on fluid grid design, so I'm leaning toward C. It makes sense for flexibility.

Isaca CISA Exam - Topic 1 Question 7 Discussion