Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISA Exam - Topic 5 Question 52 Discussion

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:
D) a risk management process.
A) industry best practices.
B) an information security framework.
C) past information security incidents.

Isaca CISA Exam - Topic 5 Question 52 Discussion

Actual exam question for Isaca's CISA exam
Question #: 52
Topic #: 5
[All CISA Questions]

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

Show Suggested Answer Hide Answer
Suggested Answer: D

by Amie at May 09, 2022, 02:30 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Emmanuel
8 months ago
Wait, are we sure that's the best approach?
upvoted 0 times
...
Cherelle
9 months ago
Agreed, risk management is key!
upvoted 0 times
...
Rosalind
9 months ago
Past incidents can inform policies, but not the primary basis.
upvoted 0 times
...
Sylvia
9 months ago
I think industry best practices are more relevant.
upvoted 0 times
...
Lemuel
9 months ago
Definitely should be based on a risk management process.
upvoted 0 times
...
Edda
9 months ago
I definitely recall that industry best practices are important, but I wonder if they are enough on their own.
upvoted 0 times
...
Sherita
9 months ago
I feel like past incidents could inform policies, but they shouldn't be the main basis. It's tricky!
upvoted 0 times
...
Veronika
9 months ago
I think the policies should be based on a risk management process, but I'm not entirely sure if that's the primary focus.
upvoted 0 times
...
Julian
9 months ago
I remember a practice question that emphasized the importance of an information security framework, so I might lean towards option B.
upvoted 0 times
...
Natalie
9 months ago
I'm a bit confused by this question. I'm not sure which two attributes are required - maybe I should review the material again.
upvoted 0 times
...
Antonio
9 months ago
I've got this! The key is to set the group ID bit on the directory so that new files inherit the group ownership. So the answer is definitely chmod g+s sales.
upvoted 0 times
...
Sue
10 months ago
Okay, let's see here. I think the key is to figure out why those orders are still showing up in the Ship Confirm program after being shipped. I'll start by checking the order activity rules.
upvoted 0 times
...
Pilar
10 months ago
Hmm, I'm a bit confused. Does the stock split affect the option contract itself, or just the underlying shares? I'll need to think this through carefully.
upvoted 0 times
...

Save Cancel