MENU
What is BEST for an IS auditor lo review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?
Suggested Answer: B
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
PR
Princess
11 months ago
Surprised no one mentioned the importance of testing!
HU
Huey
12 months ago
Wait, are we sure D is enough? Seems too basic.
RE
Rene
12 months ago
C is a must too, can't overlook system inventories!
RO
Roosevelt
12 months ago
I think B is more important, change management is crucial.
AL
Alease
1 year ago
Gotta go with A, full test results are key!
GW
Gwenn
1 year ago
Completed test plans seem like they would provide a good overview, but I wonder if they cover everything needed for a thorough assessment.
MA
Malcom
1 year ago
I remember a practice question that emphasized the importance of change management processes, so I might lean towards option B.
WI
William
1 year ago
I think reviewing the full test results is crucial, but I'm not entirely sure if that's the best option here.
MA
Matthew
1 year ago
I feel like the updated inventory of systems could be relevant, but it doesn't directly assess the effectiveness of the changes made.
SH
Shelba
1 year ago
I think the key here is to focus on the specific details in the question, like identifying critical assets and setting up the planning and logistics. Based on that, I'm going to go with B. The Pre-Assessment Phase seems to be the best fit.
FE
Felicitas
1 year ago
This looks like a tricky question on XML-Signatures. I'll need to carefully review the options and think through what's correct and incorrect.
WI
Willie
1 year ago
I think the key here is that the participants need to be able to discriminate between the treatment conditions. If they can't tell the difference, then the alternating-treatments design won't be able to demonstrate the effects of the different treatments. The gradual changes and multiple problem behaviors don't seem as directly relevant.
IL
Iluminada
1 year ago
Hmm, I'm a bit unsure about this one. I know income tax and employee pension contributions are statutory deductions, but I'm not sure about the other options. I'll have to think this through step-by-step.
LO
Long
1 year ago
I'm a bit confused by the wording of this question. What exactly is the difference between a Cyber Incident Response Plan and a Disaster Recovery Plan? They both seem to deal with responding to security incidents. I'll have to review my notes on that.
RO
Rosenda
1 year ago
Okay, I've got this. The key is to identify the risk response planning technique that allows you to shift the impact of a threat to someone else. That would be risk transference.