MENU
Which of the following is the BEST source of information for an IS auditor when planning an audit of a business application's controls?
Suggested Answer: A
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
CA
Carma
11 months ago
Wait, are we seriously considering user documentation as a top source?
ON
Ona
12 months ago
Change control procedures? Really? I’m not convinced that’s the best source.
DO
Dominque
12 months ago
Access control lists are crucial for audits, can't overlook them!
BU
Bulah
12 months ago
I think user documentation is more reliable.
WY
Wynell
1 year ago
Process flow diagrams are super helpful for understanding controls!
BE
Beth
1 year ago
Access control lists seem important for understanding who has access, but I wonder if they provide enough context for the overall controls.
GA
Gail
1 year ago
I remember a practice question where user documentation was mentioned as a key resource, but I feel like it might not cover everything we need for the audit.
JA
Jame
1 year ago
I think process flow diagrams could be really helpful since they show how the application works, but I'm not entirely sure if they're the best source.
EM
Emile
1 year ago
Change control procedures might be crucial too, especially for understanding how changes affect the application, but I can't recall if they were emphasized in our studies.
PA
Paola
1 year ago
Okay, I've got this. The key is to gather all the relevant information about the related party transactions, including the terms, loans, leases, and purchases. That will allow me to assess whether they are appropriate and properly disclosed.
PE
Pedro
1 year ago
The key here is to identify the security best practice that is not recommended for eradicating malware. Options A, B, and C are all good practices, so the answer must be D.
BR
Brett
1 year ago
Okay, I think I've got this. The key is understanding what "re-identifiable" means in the context of the data sets. Let me jot down some notes.
JE
Jerlene
1 year ago
Okay, I think I've got this. Based on the information provided, the minimum number of remaining test cases that must be executed is 6. I'll double-check my work, but I'm pretty confident in that answer.