An IS audit learn is evaluating the documentation related to the most recent application user-access review performed by IT and business management It is determined that the user list was not system-generated. Which of the following should be the GREATEST concern?
Suggested Answer: C
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
26 comments · newest first
DO
Doretha
7 days ago
Definitely source! Manual lists can lead to errors and security risks.
BA
Barabara
12 days ago
Availability is less of a concern here. Focus on source and completeness.
MA
Mammie
17 days ago
Confidentiality is important, but we need to know where the data came from first.
VI
Viki
23 days ago
Completeness matters too, but source is critical for trust.
SH
Shenika
28 days ago
Agreed! If it's not system-generated, how reliable is it?
MA
Marge
1 month ago
I think the source of the user list is the biggest concern.
SC
Scarlet
1 month ago
Definitely source; we need accurate data for audits.
AM
Amber
1 month ago
Availability seems less important in this case.
JU
Justine
2 months ago
Confidentiality could be a risk, but source first.
CA
Cassie
2 months ago
Completeness matters too, but source is critical.
SH
Sherly
2 months ago
Agreed, if it's not system-generated, how reliable is it?
NI
Nickie
2 months ago
I think the source is the biggest issue.
OL
Oliva
2 months ago
Availability seems less critical compared to the source. Gotta know where it came from!
JU
Judy
2 months ago
I disagree, confidentiality should be the top concern. Can't risk sensitive info leaking!
MA
Matilda
3 months ago
Wait, so the list wasn't system-generated? That's surprising!
JA
Janae
3 months ago
I think completeness is more important. If it's missing users, that's a huge issue.
CH
Chana
3 months ago
Definitely the source of the user list reviewed. That's a big red flag!
LI
Lili
3 months ago
This seems off, how can they not have a system-generated list?
DA
Daron
3 months ago
Completeness is important too, but source is key here.
GL
Gladys
4 months ago
Wait, are we sure the list wasn’t generated by the system?
EM
Emilio
5 months ago
I agree, that’s a huge red flag.
MI
Mila
5 months ago
Definitely the source of the user list reviewed!
LO
Louvenia
6 months ago
I guess availability is important, but if the user list is flawed from the start, it seems like the source should be the main concern.
DE
Delila
6 months ago
I feel like we had a practice question similar to this, and it emphasized the source of the data. If it's not from a reliable system, it raises a lot of red flags.
JO
Joye
6 months ago
I'm not entirely sure, but I think completeness might be a big issue too. If the list is missing users, it could create security risks.
VA
Val
6 months ago
I remember we discussed the importance of the source of data in our last class. If the user list wasn't system-generated, that could lead to inaccuracies.