Isaca CISA Exam - Topic 5 Question 52 Discussion

Actual exam question for Isaca's CISA exam

Question #: 52
Topic #: 5

[All CISA Questions]

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

Aindustry best practices.

Ban information security framework.

Cpast information security incidents.

Da risk management process.

Show Suggested Answer

Suggested Answer: D

by Amie at May 09, 2022, 02:30 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emmanuel

4 months ago

Wait, are we sure that's the best approach?

upvoted 0 times

...

Cherelle

4 months ago

Agreed, risk management is key!

upvoted 0 times

...

Rosalind

4 months ago

Past incidents can inform policies, but not the primary basis.

upvoted 0 times

...

Sylvia

4 months ago

I think industry best practices are more relevant.

upvoted 0 times

...

Lemuel

5 months ago

Definitely should be based on a risk management process.

upvoted 0 times

...

Edda

5 months ago

I definitely recall that industry best practices are important, but I wonder if they are enough on their own.

upvoted 0 times

...

Sherita

5 months ago

I feel like past incidents could inform policies, but they shouldn't be the main basis. It's tricky!

upvoted 0 times

...

Veronika

5 months ago

I think the policies should be based on a risk management process, but I'm not entirely sure if that's the primary focus.

upvoted 0 times

...

Julian

5 months ago

I remember a practice question that emphasized the importance of an information security framework, so I might lean towards option B.

upvoted 0 times

...

Natalie

5 months ago

I'm a bit confused by this question. I'm not sure which two attributes are required - maybe I should review the material again.

upvoted 0 times

...

Antonio

5 months ago

I've got this! The key is to set the group ID bit on the directory so that new files inherit the group ownership. So the answer is definitely chmod g+s sales.

upvoted 0 times

...

Sue

5 months ago

Okay, let's see here. I think the key is to figure out why those orders are still showing up in the Ship Confirm program after being shipped. I'll start by checking the order activity rules.

upvoted 0 times

...

Pilar

5 months ago

Hmm, I'm a bit confused. Does the stock split affect the option contract itself, or just the underlying shares? I'll need to think this through carefully.

upvoted 0 times

...