MENU
An IS auditor is evaluating an organization's IT strategy and plans. Which of the following would be of GREATEST concern?
Suggested Answer: A
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The best way to prevent fraudulent payments is to implement segregation of duties between the vendor setup and payment processing. Segregation of duties is an important control measure used to mitigate the risks associated with fraud and errors. By separating the processes of vendor setup and payment processing, it ensures that no single individual has control over both activities, and thereby reduces the risk of fraudulent payments. Additionally, other measures such as dual authorization and automated controls can be used to further reduce the risk.
35 comments · newest first
DE
Dell
10 months ago
Inadequate documentation can lead to major problems too!
LU
Lucy
11 months ago
Wait, are we really saying no security policy is the biggest issue?
JO
Johnetta
11 months ago
I think not engaging in strategic planning is worse.
NI
Nida
11 months ago
Totally agree, no security policy is a huge red flag.
XO
Xochitl
11 months ago
A defined IT security policy is a must!
KA
Katy
12 months ago
I recall a practice question where the lack of an IT security policy was highlighted as a significant risk. It makes me think that option A could be the right choice here.
AL
Allene
12 months ago
I feel like the documentation of IT strategic planning is important, but it might not be as critical as having a solid IT security policy.
EL
Elenora
12 months ago
I'm not entirely sure, but I think IT engagement in business strategic planning is crucial. If they're not involved, it could lead to misalignment.
SH
Shaquana
1 year ago
I remember we discussed the importance of having a defined IT security policy in class. It seems like that would be a major concern for an IS auditor.
HU
Hui
1 year ago
Okay, I've got this. The question is asking about the IT auditor's perspective, so I need to think about what would be the biggest red flag for them in terms of evaluating the organization's IT strategy and plans. I'm leaning towards option C - if IT isn't engaged in the business strategic planning, that seems like a major gap.
RO
Ronald
1 year ago
Hmm, this is a tricky one. I'm not entirely sure what the "greatest concern" means in this context. Is it the most critical issue, the one that would have the biggest impact? I'll need to think through each option carefully.
VA
Valda
1 year ago
This question seems straightforward - I think the key is to focus on the "greatest concern" part. The options seem to be about different aspects of IT strategy and planning, so I'll need to evaluate which one would be the biggest issue.
LI
Lindsey
1 year ago
I'm a bit confused by the wording of this question. What exactly does "greatest concern" mean? Is it the most severe issue, the most likely to cause problems, or something else? I'll need to re-read the options and try to figure out the intent behind the question.
CA
Carmelina
1 year ago
I'm feeling pretty confident about this one. The Platform Events approach in A is definitely the way to go. It's the most modern and flexible solution that meets all the requirements. I'll focus on understanding the details of how to implement that.
MI
Micheline
1 year ago
I remember that CSR strategies are often linked to brand strength, but I'm not sure if differentiation is also considered a direct benefit.
LA
Lavelle
1 year ago
Hmm, I'm a bit confused by the different components and arguments that need to be fixed. I'll need to review the Kubernetes documentation carefully to make sure I understand how to properly configure the API server, Kubelet, and ETCD.
AL
Alecia
1 year ago
Hmm, I'm not totally sure about this one. I know information radiators are used in Agile, but I can't remember the exact definition. I'll have to think about this one a bit more.
LI
Lisandra
1 year ago
Wait, so IT isn't even involved in business strategy planning? That's like a chef not being in the kitchen - recipe for disaster!
VE
Veronique
1 year ago
C) IT is not engaged in business strategic planning.
BA
Bambi
1 year ago
B) The business strategy meeting minutes are not distributed.
GA
Gayla
1 year ago
A) There is not a defined IT security policy.
BA
Barabara
1 year ago
B) The business strategy meeting minutes not being distributed? That's just lazy. How will anyone know what's going on?
CA
Carmela
1 year ago
C) IT is not engaged in business strategic planning.
FR
Frederica
1 year ago
B) I agree, it's important to have clear policies in place.
FA
Farrah
1 year ago
A) There is not a defined IT security policy.
SE
Selma
1 year ago
Hmm, D) Inadequate documentation of IT strategic planning is a red flag. How will the auditor even evaluate the strategy without proper documentation?
SO
Sophia
2 years ago
A) A lack of defined IT security policy is pretty worrying. How can you protect the organization without clear security guidelines?
HI
Hildred
2 years ago
C) IT is not engaged in business strategic planning seems like the biggest concern. If IT is not involved, how can they align their plans and investments with the business needs?
GI
Gilberto
1 year ago
D) There is inadequate documentation of IT strategic planning.
IR
Irma
1 year ago
C) IT is not engaged in business strategic planning.
GI
Gianna
1 year ago
B) The business strategy meeting minutes are not distributed.
MI
Mi
1 year ago
A) There is not a defined IT security policy.
BA
Barrett
2 years ago
But what about the inadequate documentation of IT strategic planning? That could also lead to issues in the organization's IT strategy.
GL
Glennis
2 years ago
I agree with Rory. Without IT being involved in strategic planning, there could be major gaps in the organization's IT strategy.
RO
Rory
2 years ago
I think the greatest concern would be if IT is not engaged in business strategic planning.