Isaca CISA Exam - Topic 2 Question 113 Discussion

Actual exam question for Isaca's CISA exam

Question #: 113
Topic #: 2

An IS audit learn is evaluating the documentation related to the most recent application user-access review performed by IT and business management It is determined that the user list was not system-generated. Which of the following should be the GREATEST concern?

AAvailability of the user list reviewed

BConfidentiality of the user list reviewed

CSource of the user list reviewed

DCompleteness of the user list reviewed

Show Suggested Answer

Suggested Answer: C

by Lynelle at Apr 11, 2026, 07:47 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emilio

18 days ago

I agree, that’s a huge red flag.

upvoted 0 times

...

Mila

23 days ago

Definitely the source of the user list reviewed!

upvoted 0 times

...

Louvenia

1 month ago

I guess availability is important, but if the user list is flawed from the start, it seems like the source should be the main concern.

upvoted 0 times

...

Delila

1 month ago

I feel like we had a practice question similar to this, and it emphasized the source of the data. If it's not from a reliable system, it raises a lot of red flags.

upvoted 0 times

...

Joye

2 months ago

I'm not entirely sure, but I think completeness might be a big issue too. If the list is missing users, it could create security risks.

upvoted 0 times

...

Val

2 months ago

I remember we discussed the importance of the source of data in our last class. If the user list wasn't system-generated, that could lead to inaccuracies.

upvoted 0 times

...