Isaca CISA Exam - Topic 5 Question 80 Discussion

Actual exam question for Isaca's CISA exam

Question #: 80
Topic #: 5

An IT governance body wants to determine whether IT service delivery is based on consistently effective processes. Which of the following is the BEST approach?

Aimplement a control self-assessment (CSA)

BConduct a gap analysis

CDevelop a maturity model

DEvaluate key performance indicators (KPIs)

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by Sheldon at Jul 02, 2024, 02:55 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Norah

6 months ago

I agree, CSA seems like the best fit here!

upvoted 0 times

...

Laura

6 months ago

Wait, can a maturity model really show consistent effectiveness?

upvoted 0 times

...

Hana

6 months ago

Definitely leaning towards KPIs for measurable results!

upvoted 0 times

...

Alyce

7 months ago

I think a gap analysis is more thorough for this.

upvoted 0 times

...

Kattie

7 months ago

A CSA helps identify process effectiveness directly.

upvoted 0 times

...

Gail

7 months ago

Evaluating KPIs might be useful, but I feel like it only tells part of the story about process effectiveness.

upvoted 0 times

...

Edna

7 months ago

Developing a maturity model sounds familiar, but I can't recall if it directly measures effectiveness in service delivery.

upvoted 0 times

...

Becky

7 months ago

I remember practicing gap analysis questions, and it seems like that could help identify where processes are lacking, but I wonder if it's comprehensive enough.

upvoted 0 times

...

Flo

8 months ago

I think a control self-assessment could be a good way to evaluate processes, but I'm not entirely sure if it's the best option here.

upvoted 0 times

...

Dana

8 months ago

Developing a maturity model could be a good way to assess the IT service delivery processes and identify areas for improvement. But I'm not sure if that's the most direct approach the question is looking for.

upvoted 0 times

...

Cory

8 months ago

Hmm, I'm a bit confused on this one. The options seem to cover different approaches, but I'm not sure which one is the "BEST" approach as the question asks. I might need to review my notes on IT governance frameworks to decide.

upvoted 0 times

...

Willodean

8 months ago

This seems like a straightforward question about evaluating IT service delivery processes. I think the best approach would be to implement a control self-assessment (CSA) to get a clear picture of how effective the current processes are.

upvoted 0 times

...

Ryan

8 months ago

Evaluating key performance indicators (KPIs) seems like it could provide valuable insights into the effectiveness of the IT service delivery processes. I think I'll go with that option unless I can come up with a compelling reason why another approach might be better.

upvoted 0 times

...

Thad

8 months ago

This one seems a bit tricky. I'll need to think it through carefully.

upvoted 0 times

...

Matthew

8 months ago

If medium rates drop, the humped curve should logically become steeper at the ends, right? But I feel like I might be confusing it with how long-term rates behave under certain conditions.

upvoted 0 times

...

In

8 months ago

Alright, I think I've got a handle on this. The key is to use the given information about the stock, the up-move factor, and the risk-free rate to calculate the one-period call option value using the binomial model. Then I can compare that to the multiple-choice options and select the closest one. I feel pretty confident I can work through this step-by-step.

upvoted 0 times

...